3, 0xc1}, {&(0x7f00000009c0)=""/231, 0xe7}], &(0x7f0000000b00)=[0x2, 0x200, 0x289, 0xc7, 0x5]}, {0x4, 0x1, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b40)=""/75, 0x4b}, {&(0x7f0000000bc0)=""/49, 0x31}, {&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/205, 0xcd}], &(0x7f0000000e00)=[0x7fff]}, {0x3, 0x1, 0x0, &(0x7f0000001000)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/193, 0xc1}, {&(0x7f0000000f80)=""/84, 0x54}], &(0x7f0000001040)=[0x4, 0x2, 0x7, 0x8000000000000001]}, {0x1, 0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001080)=""/55, 0x37}], &(0x7f0000001100)=[0x3, 0xfffffffffffffc01, 0x7, 0xcf6, 0xfffffffffffffffb, 0x923, 0x4, 0xffffffff80000000]}, {0x1, 0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001140)=""/52, 0x34}], &(0x7f00000011c0)=[0x7, 0xffff, 0x7, 0x8000, 0x3, 0x5, 0x2, 0xffffffffffffffff]}], 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="01009cec0100000018000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) 00:06:04 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x301000) syz_open_dev$rtc(&(0x7f0000000080), 0xc820, 0x8000) (async) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x33, 0x1e, 0x4, 0x18, 0xa, 0x5, 0x0, 0x21}) 00:06:04 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) r1 = socket(0x2a, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000005300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fddbdf2500000000080007000900000008000100", @ANYRES32=r3, @ANYBLOB="060006004e0100001400020077673200000000000000000000000000b7f78623047d6588477e076f"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000005380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:04 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x13000000}], 0x2) 00:06:04 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000001200)=[{0x8, 0x1, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/178, 0xb2}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/211, 0xd3}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f0000000540)=""/93, 0x5d}], &(0x7f0000000740)=[0x5, 0xffffffffffffffff]}, {0x4, 0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/68, 0x44}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/193, 0xc1}, {&(0x7f00000009c0)=""/231, 0xe7}], &(0x7f0000000b00)=[0x2, 0x200, 0x289, 0xc7, 0x5]}, {0x4, 0x1, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b40)=""/75, 0x4b}, {&(0x7f0000000bc0)=""/49, 0x31}, {&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/205, 0xcd}], &(0x7f0000000e00)=[0x7fff]}, {0x3, 0x1, 0x0, &(0x7f0000001000)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/193, 0xc1}, {&(0x7f0000000f80)=""/84, 0x54}], &(0x7f0000001040)=[0x4, 0x2, 0x7, 0x8000000000000001]}, {0x1, 0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001080)=""/55, 0x37}], &(0x7f0000001100)=[0x3, 0xfffffffffffffc01, 0x7, 0xcf6, 0xfffffffffffffffb, 0x923, 0x4, 0xffffffff80000000]}, {0x1, 0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001140)=""/52, 0x34}], &(0x7f00000011c0)=[0x7, 0xffff, 0x7, 0x8000, 0x3, 0x5, 0x2, 0xffffffffffffffff]}], 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="01009cec0100000018000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) 00:06:04 executing program 1: r0 = syz_io_uring_setup(0x545d, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = socket(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 00:06:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x557c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000100)="f143c4d401d796d2889842e8d8f15ed6455e97dfea2f56524ebb95748320e40dd46cbf7965b1e76aa7f2987586d1426fc97ce74d10c4dc93e42ca816d6d6de1870503b65f4f6f247efd65cb9a58d2d14aad69a51483c3405f137fd6b78ce00e47cd1dceb", 0x64}, {&(0x7f0000000180)="a6b8d82fd61d0a7c09c3cf7936076609300cdf51c9fe017c64e9f93be2b88003e6d8eafb9f9336e17f96771882aec437bc189cc81455071dbdd87b68bbbbaa2913cea3135e432ce1b8e74474ef62a7e255e8f97b37a6447e6f2afe28a036b592daf9248cafb60ce38b200243fa83ca64e2706ba8fbc0b8095f142d773476f9854ae0bc2c42b1b4276faf3ade28aa4392be18355acbef10bc914ae774e07d3a0ef192081e0f36aefe5bfa2dbf9643d4068b8843203933c4430ce99efb22dd2611b472426b2f4a570d768efb", 0xcb, 0x3}, {&(0x7f0000000280), 0x0, 0x2}, {&(0x7f00000002c0)="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", 0xfd, 0x2}, {&(0x7f00000003c0)="df99309d964884c54a1dd312458560fe28865a36d8d236b31912a9013c9780ae4a5e4585b255acd4f18873f1de417b94048f7f5e6edafdb58d5ed27dcfdc1c4571d5e9e1e2eb6638fce3590f6f73a3d4068d9d68ef405b8dc0c238d6ab740e84093a6612d5df94e1fc8582b02fa161cb4a54c587891277d5e55aca8b183451b5aac4b22a9f51439b5f4d3b36e54dc3325036d4a70ad67fa5edf8ee2e31127d81d7e424162f8daee5bd1e72a068872691bb3cb5beccd206989e225c421689c6b38a122bddf283d2b8c3c4976bbdd766056c24", 0xd2, 0x2}]}, 0x5}, 0x1) 00:06:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) (async) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) (async) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x557c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000100)="f143c4d401d796d2889842e8d8f15ed6455e97dfea2f56524ebb95748320e40dd46cbf7965b1e76aa7f2987586d1426fc97ce74d10c4dc93e42ca816d6d6de1870503b65f4f6f247efd65cb9a58d2d14aad69a51483c3405f137fd6b78ce00e47cd1dceb", 0x64}, {&(0x7f0000000180)="a6b8d82fd61d0a7c09c3cf7936076609300cdf51c9fe017c64e9f93be2b88003e6d8eafb9f9336e17f96771882aec437bc189cc81455071dbdd87b68bbbbaa2913cea3135e432ce1b8e74474ef62a7e255e8f97b37a6447e6f2afe28a036b592daf9248cafb60ce38b200243fa83ca64e2706ba8fbc0b8095f142d773476f9854ae0bc2c42b1b4276faf3ade28aa4392be18355acbef10bc914ae774e07d3a0ef192081e0f36aefe5bfa2dbf9643d4068b8843203933c4430ce99efb22dd2611b472426b2f4a570d768efb", 0xcb, 0x3}, {&(0x7f0000000280), 0x0, 0x2}, {&(0x7f00000002c0)="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", 0xfd, 0x2}, {&(0x7f00000003c0)="df99309d964884c54a1dd312458560fe28865a36d8d236b31912a9013c9780ae4a5e4585b255acd4f18873f1de417b94048f7f5e6edafdb58d5ed27dcfdc1c4571d5e9e1e2eb6638fce3590f6f73a3d4068d9d68ef405b8dc0c238d6ab740e84093a6612d5df94e1fc8582b02fa161cb4a54c587891277d5e55aca8b183451b5aac4b22a9f51439b5f4d3b36e54dc3325036d4a70ad67fa5edf8ee2e31127d81d7e424162f8daee5bd1e72a068872691bb3cb5beccd206989e225c421689c6b38a122bddf283d2b8c3c4976bbdd766056c24", 0xd2, 0x2}]}, 0x5}, 0x1) 00:06:04 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x14000000}], 0x2) 00:06:04 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) r1 = socket(0x2a, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000005300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fddbdf2500000000080007000900000008000100", @ANYRES32=r3, @ANYBLOB="060006004e0100001400020077673200000000000000000000000000b7f78623047d6588477e076f"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000005380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) (async) socket(0x2a, 0x2, 0x0) (async) recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) socket(0x10, 0x2, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00'}) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000005300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fddbdf2500000000080007000900000008000100", @ANYRES32=r3, @ANYBLOB="060006004e0100001400020077673200000000000000000000000000b7f78623047d6588477e076f"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40000) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x81, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000005380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) (async) 00:06:04 executing program 1: r0 = syz_io_uring_setup(0x545d, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) (async) ioctl$RTC_WIE_OFF(r1, 0x7010) (async) r2 = socket(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) [ 1828.113150][ T2521] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1831.564715][ T27] audit: type=1400 audit(1708128364.730:323): avc: denied { getopt } for pid=3472 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 00:06:05 executing program 3: r0 = socket(0x29, 0x5, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="e09a2c24cc15"], 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x98, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x3d, 0xa8, @random="948413cf0b9de3b361aeb52894c87fecc814f45ca7e7f149bc7272113f5cebe5eed88d86fa831582485ed16587487e3296e3c41fcf429b9bbc"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x98}}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000001680)={0x1144, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4b4, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x44c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffd}, @WGPEER_A_ALLOWEDIPS={0x414, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_PEERS={0xc54, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7901aea17df739da17a47e5dc12760f27f19f7c821105e3c513aeec5766d1a57"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fff, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "948fa41dfc4f32f31800dd3e3f0f2b58610e82b7bd5a1f2b05a3f783876cedf5"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x118, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0xac, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dd96ed3f40e52bc16c308a989fd545e27e0b5b15a773fbdb6507ba1c91d38860"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e658fa660f0e91309afdb33606f556ece57c70f1fd77d1210e8fc657b0fadce1"}]}, {0x2ac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @private2, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x240, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e3d12d5f4a11ceb973e9088eed7d0824d8bf7286a06bba0508e4143a80e269a4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x368, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da979f9a58d823278d7ed09d7942df86acf441a0f458538f52f6168646963c6"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c9a1d242583b0aff858107244e611ff9db68aea290767c8b59ea4c63fddbd61"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private1, 0x100}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f1ecdd86dad4d203a63b7ef95df4c1b39d1dd53212fe8a9b47fd327254a37df6"}, @WGPEER_A_ALLOWEDIPS={0x298, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}]}, {0x464, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cae7956a400c4385077650365732955366d6c2802f2b5f370c1e2cab26e6eef3"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x408, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x1144}, 0x1, 0x0, 0x0, 0x40814}, 0x0) (async) r4 = syz_io_uring_setup(0x47b6, &(0x7f0000000180)={0x0, 0xa67}, &(0x7f0000000140), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/271, 0x10f}, {&(0x7f0000000040)=""/29, 0x1d}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x300, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) (async) recvmsg$can_raw(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/234, 0xea}], 0x3, &(0x7f0000000640)=""/161, 0xa1}, 0x10000) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x15000000}], 0x2) 00:06:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x557c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000100)="f143c4d401d796d2889842e8d8f15ed6455e97dfea2f56524ebb95748320e40dd46cbf7965b1e76aa7f2987586d1426fc97ce74d10c4dc93e42ca816d6d6de1870503b65f4f6f247efd65cb9a58d2d14aad69a51483c3405f137fd6b78ce00e47cd1dceb", 0x64}, {&(0x7f0000000180)="a6b8d82fd61d0a7c09c3cf7936076609300cdf51c9fe017c64e9f93be2b88003e6d8eafb9f9336e17f96771882aec437bc189cc81455071dbdd87b68bbbbaa2913cea3135e432ce1b8e74474ef62a7e255e8f97b37a6447e6f2afe28a036b592daf9248cafb60ce38b200243fa83ca64e2706ba8fbc0b8095f142d773476f9854ae0bc2c42b1b4276faf3ade28aa4392be18355acbef10bc914ae774e07d3a0ef192081e0f36aefe5bfa2dbf9643d4068b8843203933c4430ce99efb22dd2611b472426b2f4a570d768efb", 0xcb, 0x3}, {&(0x7f0000000280), 0x0, 0x2}, {&(0x7f00000002c0)="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", 0xfd, 0x2}, {&(0x7f00000003c0)="df99309d964884c54a1dd312458560fe28865a36d8d236b31912a9013c9780ae4a5e4585b255acd4f18873f1de417b94048f7f5e6edafdb58d5ed27dcfdc1c4571d5e9e1e2eb6638fce3590f6f73a3d4068d9d68ef405b8dc0c238d6ab740e84093a6612d5df94e1fc8582b02fa161cb4a54c587891277d5e55aca8b183451b5aac4b22a9f51439b5f4d3b36e54dc3325036d4a70ad67fa5edf8ee2e31127d81d7e424162f8daee5bd1e72a068872691bb3cb5beccd206989e225c421689c6b38a122bddf283d2b8c3c4976bbdd766056c24", 0xd2, 0x2}]}, 0x5}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) socket(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) (async) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) (async) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x557c}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000100)="f143c4d401d796d2889842e8d8f15ed6455e97dfea2f56524ebb95748320e40dd46cbf7965b1e76aa7f2987586d1426fc97ce74d10c4dc93e42ca816d6d6de1870503b65f4f6f247efd65cb9a58d2d14aad69a51483c3405f137fd6b78ce00e47cd1dceb", 0x64}, {&(0x7f0000000180)="a6b8d82fd61d0a7c09c3cf7936076609300cdf51c9fe017c64e9f93be2b88003e6d8eafb9f9336e17f96771882aec437bc189cc81455071dbdd87b68bbbbaa2913cea3135e432ce1b8e74474ef62a7e255e8f97b37a6447e6f2afe28a036b592daf9248cafb60ce38b200243fa83ca64e2706ba8fbc0b8095f142d773476f9854ae0bc2c42b1b4276faf3ade28aa4392be18355acbef10bc914ae774e07d3a0ef192081e0f36aefe5bfa2dbf9643d4068b8843203933c4430ce99efb22dd2611b472426b2f4a570d768efb", 0xcb, 0x3}, {&(0x7f0000000280), 0x0, 0x2}, {&(0x7f00000002c0)="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", 0xfd, 0x2}, {&(0x7f00000003c0)="df99309d964884c54a1dd312458560fe28865a36d8d236b31912a9013c9780ae4a5e4585b255acd4f18873f1de417b94048f7f5e6edafdb58d5ed27dcfdc1c4571d5e9e1e2eb6638fce3590f6f73a3d4068d9d68ef405b8dc0c238d6ab740e84093a6612d5df94e1fc8582b02fa161cb4a54c587891277d5e55aca8b183451b5aac4b22a9f51439b5f4d3b36e54dc3325036d4a70ad67fa5edf8ee2e31127d81d7e424162f8daee5bd1e72a068872691bb3cb5beccd206989e225c421689c6b38a122bddf283d2b8c3c4976bbdd766056c24", 0xd2, 0x2}]}, 0x5}, 0x1) (async) 00:06:05 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) (rerun: 32) r1 = socket(0x2a, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket(0x10, 0x2, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000005300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fddbdf2500000000080007000900000008000100", @ANYRES32=r3, @ANYBLOB="060006004e0100001400020077673200000000000000000000000000b7f78623047d6588477e076f"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000005380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:05 executing program 1: r0 = syz_io_uring_setup(0x545d, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) ioctl$RTC_WIE_OFF(r1, 0x7010) (async) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = socket(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x16000000}], 0x2) 00:06:05 executing program 3: r0 = socket(0x29, 0x5, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="e09a2c24cc15"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x98, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x3d, 0xa8, @random="948413cf0b9de3b361aeb52894c87fecc814f45ca7e7f149bc7272113f5cebe5eed88d86fa831582485ed16587487e3296e3c41fcf429b9bbc"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x98}}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000001680)={0x1144, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4b4, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x44c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffd}, @WGPEER_A_ALLOWEDIPS={0x414, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_PEERS={0xc54, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7901aea17df739da17a47e5dc12760f27f19f7c821105e3c513aeec5766d1a57"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fff, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "948fa41dfc4f32f31800dd3e3f0f2b58610e82b7bd5a1f2b05a3f783876cedf5"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x118, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0xac, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dd96ed3f40e52bc16c308a989fd545e27e0b5b15a773fbdb6507ba1c91d38860"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e658fa660f0e91309afdb33606f556ece57c70f1fd77d1210e8fc657b0fadce1"}]}, {0x2ac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @private2, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x240, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e3d12d5f4a11ceb973e9088eed7d0824d8bf7286a06bba0508e4143a80e269a4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x368, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da979f9a58d823278d7ed09d7942df86acf441a0f458538f52f6168646963c6"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c9a1d242583b0aff858107244e611ff9db68aea290767c8b59ea4c63fddbd61"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private1, 0x100}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f1ecdd86dad4d203a63b7ef95df4c1b39d1dd53212fe8a9b47fd327254a37df6"}, @WGPEER_A_ALLOWEDIPS={0x298, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}]}, {0x464, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cae7956a400c4385077650365732955366d6c2802f2b5f370c1e2cab26e6eef3"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x408, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x1144}, 0x1, 0x0, 0x0, 0x40814}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000001680)={0x1144, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4b4, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x44c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffd}, @WGPEER_A_ALLOWEDIPS={0x414, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_PEERS={0xc54, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7901aea17df739da17a47e5dc12760f27f19f7c821105e3c513aeec5766d1a57"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fff, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "948fa41dfc4f32f31800dd3e3f0f2b58610e82b7bd5a1f2b05a3f783876cedf5"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x118, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0xac, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dd96ed3f40e52bc16c308a989fd545e27e0b5b15a773fbdb6507ba1c91d38860"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e658fa660f0e91309afdb33606f556ece57c70f1fd77d1210e8fc657b0fadce1"}]}, {0x2ac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @private2, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x240, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e3d12d5f4a11ceb973e9088eed7d0824d8bf7286a06bba0508e4143a80e269a4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x368, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da979f9a58d823278d7ed09d7942df86acf441a0f458538f52f6168646963c6"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c9a1d242583b0aff858107244e611ff9db68aea290767c8b59ea4c63fddbd61"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private1, 0x100}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f1ecdd86dad4d203a63b7ef95df4c1b39d1dd53212fe8a9b47fd327254a37df6"}, @WGPEER_A_ALLOWEDIPS={0x298, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}]}, {0x464, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cae7956a400c4385077650365732955366d6c2802f2b5f370c1e2cab26e6eef3"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x408, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x1144}, 0x1, 0x0, 0x0, 0x40814}, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000180)={0x0, 0xa67}, &(0x7f0000000140), &(0x7f00000000c0)) (async) r4 = syz_io_uring_setup(0x47b6, &(0x7f0000000180)={0x0, 0xa67}, &(0x7f0000000140), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/271, 0x10f}, {&(0x7f0000000040)=""/29, 0x1d}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/271, 0x10f}, {&(0x7f0000000040)=""/29, 0x1d}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x300, 0x0) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x300, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) recvmsg$can_raw(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/234, 0xea}], 0x3, &(0x7f0000000640)=""/161, 0xa1}, 0x10000) (async) recvmsg$can_raw(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/234, 0xea}], 0x3, &(0x7f0000000640)=""/161, 0xa1}, 0x10000) 00:06:05 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000004d40)=[{0x1, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f0000000140)=[0x6, 0x7fffffffffffffff, 0x0]}, {0x3, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000240)=""/235, 0xeb}], &(0x7f0000000380)=[0x4538, 0x6, 0x4]}, {0x8, 0x0, 0x0, &(0x7f0000004740)=[{&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000002600)=""/167, 0xa7}, {&(0x7f0000000540)=""/2, 0x2}, {&(0x7f00000026c0)=""/67, 0x43}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}], &(0x7f00000047c0)=[0x7fffffff, 0x3, 0x7, 0x10000, 0x53, 0x1, 0x9, 0x1, 0x6]}, {0x1, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f0000004840)=""/95, 0x5f}], &(0x7f00000048c0)=[0x5]}, {0x5, 0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004900)=""/165, 0xa5}, {&(0x7f00000049c0)=""/214, 0xd6}, {&(0x7f0000004ac0)=""/65, 0x41}, {&(0x7f0000004b40)=""/181, 0xb5}, {&(0x7f0000004c00)=""/84, 0x54}], &(0x7f0000004d00)=[0x6, 0x0, 0x0, 0x5]}], 0x5) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x17000000}], 0x2) 00:06:05 executing program 1: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x423, &(0x7f0000000000)={0x0, 0x5c5a, 0x2, 0x0, 0x257}, &(0x7f0000000200), &(0x7f0000000100)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x12, 0x0, r3, 0x0, &(0x7f0000000140)="867b93bff011dc5e5f433730c9e0d1521345ae678501815e0b58a776dfdf39be1bb4e30b679ef20a095c6fefcc1f1d9f2ba54c0c32364f09935c121aed897353b427eb43e0a9a757547824ac8b09ee2bccb2dbe880f784af40418abd", 0x5c, 0x1, 0x1, {0x0, r4}}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @broadcast}, @timestamp_reply}}}}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f00000000c0)=[0x6, 0xfffff800], 0x2) r5 = io_uring_setup(0x7695, &(0x7f0000000240)={0x0, 0xf763, 0x4, 0x1, 0x3bf}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000400), 0x4) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f00000003c0)={0x1, 0x1, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/106, 0x6a}], &(0x7f0000000380)=[0x9, 0x8, 0x55, 0x446bb53a]}, 0x20) 00:06:05 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:05 executing program 1: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x423, &(0x7f0000000000)={0x0, 0x5c5a, 0x2, 0x0, 0x257}, &(0x7f0000000200), &(0x7f0000000100)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x12, 0x0, r3, 0x0, &(0x7f0000000140)="867b93bff011dc5e5f433730c9e0d1521345ae678501815e0b58a776dfdf39be1bb4e30b679ef20a095c6fefcc1f1d9f2ba54c0c32364f09935c121aed897353b427eb43e0a9a757547824ac8b09ee2bccb2dbe880f784af40418abd", 0x5c, 0x1, 0x1, {0x0, r4}}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @broadcast}, @timestamp_reply}}}}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f00000000c0)=[0x6, 0xfffff800], 0x2) r5 = io_uring_setup(0x7695, &(0x7f0000000240)={0x0, 0xf763, 0x4, 0x1, 0x3bf}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000400), 0x4) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f00000003c0)={0x1, 0x1, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/106, 0x6a}], &(0x7f0000000380)=[0x9, 0x8, 0x55, 0x446bb53a]}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x423, &(0x7f0000000000)={0x0, 0x5c5a, 0x2, 0x0, 0x257}, &(0x7f0000000200), &(0x7f0000000100)) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x12, 0x0, r3, 0x0, &(0x7f0000000140)="867b93bff011dc5e5f433730c9e0d1521345ae678501815e0b58a776dfdf39be1bb4e30b679ef20a095c6fefcc1f1d9f2ba54c0c32364f09935c121aed897353b427eb43e0a9a757547824ac8b09ee2bccb2dbe880f784af40418abd", 0x5c, 0x1, 0x1, {0x0, r4}}) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @broadcast}, @timestamp_reply}}}}, 0x0) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f00000000c0)=[0x6, 0xfffff800], 0x2) (async) io_uring_setup(0x7695, &(0x7f0000000240)={0x0, 0xf763, 0x4, 0x1, 0x3bf}) (async) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000400), 0x4) (async) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f00000003c0)={0x1, 0x1, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/106, 0x6a}], &(0x7f0000000380)=[0x9, 0x8, 0x55, 0x446bb53a]}, 0x20) (async) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x18000000}], 0x2) 00:06:05 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000004d40)=[{0x1, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f0000000140)=[0x6, 0x7fffffffffffffff, 0x0]}, {0x3, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000240)=""/235, 0xeb}], &(0x7f0000000380)=[0x4538, 0x6, 0x4]}, {0x8, 0x0, 0x0, &(0x7f0000004740)=[{&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000002600)=""/167, 0xa7}, {&(0x7f0000000540)=""/2, 0x2}, {&(0x7f00000026c0)=""/67, 0x43}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}], &(0x7f00000047c0)=[0x7fffffff, 0x3, 0x7, 0x10000, 0x53, 0x1, 0x9, 0x1, 0x6]}, {0x1, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f0000004840)=""/95, 0x5f}], &(0x7f00000048c0)=[0x5]}, {0x5, 0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004900)=""/165, 0xa5}, {&(0x7f00000049c0)=""/214, 0xd6}, {&(0x7f0000004ac0)=""/65, 0x41}, {&(0x7f0000004b40)=""/181, 0xb5}, {&(0x7f0000004c00)=""/84, 0x54}], &(0x7f0000004d00)=[0x6, 0x0, 0x0, 0x5]}], 0x5) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000004d40)=[{0x1, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f0000000140)=[0x6, 0x7fffffffffffffff, 0x0]}, {0x3, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000240)=""/235, 0xeb}], &(0x7f0000000380)=[0x4538, 0x6, 0x4]}, {0x8, 0x0, 0x0, &(0x7f0000004740)=[{&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000002600)=""/167, 0xa7}, {&(0x7f0000000540)=""/2, 0x2}, {&(0x7f00000026c0)=""/67, 0x43}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}], &(0x7f00000047c0)=[0x7fffffff, 0x3, 0x7, 0x10000, 0x53, 0x1, 0x9, 0x1, 0x6]}, {0x1, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f0000004840)=""/95, 0x5f}], &(0x7f00000048c0)=[0x5]}, {0x5, 0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004900)=""/165, 0xa5}, {&(0x7f00000049c0)=""/214, 0xd6}, {&(0x7f0000004ac0)=""/65, 0x41}, {&(0x7f0000004b40)=""/181, 0xb5}, {&(0x7f0000004c00)=""/84, 0x54}], &(0x7f0000004d00)=[0x6, 0x0, 0x0, 0x5]}], 0x5) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x19000000}], 0x2) 00:06:05 executing program 1: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) (async) r1 = syz_io_uring_setup(0x423, &(0x7f0000000000)={0x0, 0x5c5a, 0x2, 0x0, 0x257}, &(0x7f0000000200), &(0x7f0000000100)=0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x12, 0x0, r3, 0x0, &(0x7f0000000140)="867b93bff011dc5e5f433730c9e0d1521345ae678501815e0b58a776dfdf39be1bb4e30b679ef20a095c6fefcc1f1d9f2ba54c0c32364f09935c121aed897353b427eb43e0a9a757547824ac8b09ee2bccb2dbe880f784af40418abd", 0x5c, 0x1, 0x1, {0x0, r4}}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @broadcast}, @timestamp_reply}}}}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f00000000c0)=[0x6, 0xfffff800], 0x2) r5 = io_uring_setup(0x7695, &(0x7f0000000240)={0x0, 0xf763, 0x4, 0x1, 0x3bf}) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000400), 0x4) (async) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f00000003c0)={0x1, 0x1, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/106, 0x6a}], &(0x7f0000000380)=[0x9, 0x8, 0x55, 0x446bb53a]}, 0x20) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1a000000}], 0x2) 00:06:05 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:05 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000004d40)=[{0x1, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f0000000140)=[0x6, 0x7fffffffffffffff, 0x0]}, {0x3, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000240)=""/235, 0xeb}], &(0x7f0000000380)=[0x4538, 0x6, 0x4]}, {0x8, 0x0, 0x0, &(0x7f0000004740)=[{&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000002600)=""/167, 0xa7}, {&(0x7f0000000540)=""/2, 0x2}, {&(0x7f00000026c0)=""/67, 0x43}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}], &(0x7f00000047c0)=[0x7fffffff, 0x3, 0x7, 0x10000, 0x53, 0x1, 0x9, 0x1, 0x6]}, {0x1, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f0000004840)=""/95, 0x5f}], &(0x7f00000048c0)=[0x5]}, {0x5, 0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004900)=""/165, 0xa5}, {&(0x7f00000049c0)=""/214, 0xd6}, {&(0x7f0000004ac0)=""/65, 0x41}, {&(0x7f0000004b40)=""/181, 0xb5}, {&(0x7f0000004c00)=""/84, 0x54}], &(0x7f0000004d00)=[0x6, 0x0, 0x0, 0x5]}], 0x5) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x100000000000000}], 0x2) 00:06:05 executing program 1: prctl$PR_SET_DUMPABLE(0x4, 0x0) 00:06:05 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:05 executing program 0: r0 = syz_io_uring_setup(0x4047b6, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x5, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000100), 0x2, 0x2000) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000000)=""/65, &(0x7f0000000200)=0x41) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 00:06:05 executing program 1: prctl$PR_SET_DUMPABLE(0x4, 0x0) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x200000000000000}], 0x2) 00:06:05 executing program 0: r0 = syz_io_uring_setup(0x4047b6, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x5, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) r1 = syz_open_dev$rtc(&(0x7f0000000100), 0x2, 0x2000) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000000)=""/65, &(0x7f0000000200)=0x41) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 00:06:05 executing program 1: prctl$PR_SET_DUMPABLE(0x4, 0x0) 00:06:05 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x36, 0x1, 0x1ff, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$RTC_AIE_OFF(r0, 0x7002) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) 00:06:05 executing program 0: r0 = syz_io_uring_setup(0x4047b6, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x5, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) r1 = syz_open_dev$rtc(&(0x7f0000000100), 0x2, 0x2000) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000140)) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000000)=""/65, &(0x7f0000000200)=0x41) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 00:06:05 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @broadcast}, @timestamp_reply}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0480, 0x0) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x8914}, @val={0x2, 0x4, 0xff, 0xd82, 0x1, 0x40}, @llc={@llc={0x4, 0xe, "5b87", "3e5abf268cb062246598fa3611c78984ff0ba1d097df1cb9b4735bcb56d0319be6f5946380765bebe0306fc208483a17548e6a91c4cd0e5a964348d1082ef39a3d365dbe9241b53f662231f2b5f5a1a7f12ad769f849f77df16712fcf61c74bf65780479eee927b09a5acad24d4df3d98586e679e8d2e825639a9c0fb4cce6cd7fd33e282e1d8aac8bea391fa934164b2d4e33e66a187970664600e94fabd11f52c76096d449ee590e8d6a166d518b91fc545bedeb162c1fa32cef73c3388ec3f4ffd5d61ca4a333ff46d43d861a3052650f4dd2e7215f60a88f"}}}, 0xec) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x78000, 0x0) write$tun(r1, &(0x7f00000000c0)={@void, @val={0x3, 0x3, 0x7, 0x81, 0x3, 0x1}, @ipv6=@generic={0x5, 0x6, "25c7aa", 0x8d, 0x0, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x84, 0x4, 0x1, 0xfe, 0x0, [@empty, @loopback]}], "0ace736481b6ba22307e83129d6a1d1a7aec85d3525a040606f454910c83067e91ce4614a932e32e82d7fece2380248dbbf519835ab7df0b6d51354cb358d40438f0610426badc7a07dce92dcd9a0fd8a87e9c7b34d980ca4cfc6a10fd4402715333cf6069"}}}, 0xbf) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x300000000000000}], 0x2) 00:06:05 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x36, 0x1, 0x1ff, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$RTC_AIE_OFF(r0, 0x7002) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x36, 0x1, 0x1ff, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) ioctl$RTC_AIE_OFF(r0, 0x7002) (async) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) (async) [ 1832.548503][ T3603] autofs4:pid:3603:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.11832), cmd(0xc0189375) [ 1832.562097][ T3603] autofs4:pid:3603:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x400000000000000}], 0x2) 00:06:05 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @broadcast}, @timestamp_reply}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0480, 0x0) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x8914}, @val={0x2, 0x4, 0xff, 0xd82, 0x1, 0x40}, @llc={@llc={0x4, 0xe, "5b87", "3e5abf268cb062246598fa3611c78984ff0ba1d097df1cb9b4735bcb56d0319be6f5946380765bebe0306fc208483a17548e6a91c4cd0e5a964348d1082ef39a3d365dbe9241b53f662231f2b5f5a1a7f12ad769f849f77df16712fcf61c74bf65780479eee927b09a5acad24d4df3d98586e679e8d2e825639a9c0fb4cce6cd7fd33e282e1d8aac8bea391fa934164b2d4e33e66a187970664600e94fabd11f52c76096d449ee590e8d6a166d518b91fc545bedeb162c1fa32cef73c3388ec3f4ffd5d61ca4a333ff46d43d861a3052650f4dd2e7215f60a88f"}}}, 0xec) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x78000, 0x0) write$tun(r1, &(0x7f00000000c0)={@void, @val={0x3, 0x3, 0x7, 0x81, 0x3, 0x1}, @ipv6=@generic={0x5, 0x6, "25c7aa", 0x8d, 0x0, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x84, 0x4, 0x1, 0xfe, 0x0, [@empty, @loopback]}], "0ace736481b6ba22307e83129d6a1d1a7aec85d3525a040606f454910c83067e91ce4614a932e32e82d7fece2380248dbbf519835ab7df0b6d51354cb358d40438f0610426badc7a07dce92dcd9a0fd8a87e9c7b34d980ca4cfc6a10fd4402715333cf6069"}}}, 0xbf) [ 1832.641921][ T3620] autofs4:pid:3620:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.11832), cmd(0xc0189375) [ 1832.655447][ T3620] autofs4:pid:3620:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x500000000000000}], 0x2) 00:06:05 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @broadcast}, @timestamp_reply}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0480, 0x0) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x8914}, @val={0x2, 0x4, 0xff, 0xd82, 0x1, 0x40}, @llc={@llc={0x4, 0xe, "5b87", "3e5abf268cb062246598fa3611c78984ff0ba1d097df1cb9b4735bcb56d0319be6f5946380765bebe0306fc208483a17548e6a91c4cd0e5a964348d1082ef39a3d365dbe9241b53f662231f2b5f5a1a7f12ad769f849f77df16712fcf61c74bf65780479eee927b09a5acad24d4df3d98586e679e8d2e825639a9c0fb4cce6cd7fd33e282e1d8aac8bea391fa934164b2d4e33e66a187970664600e94fabd11f52c76096d449ee590e8d6a166d518b91fc545bedeb162c1fa32cef73c3388ec3f4ffd5d61ca4a333ff46d43d861a3052650f4dd2e7215f60a88f"}}}, 0xec) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x78000, 0x0) write$tun(r1, &(0x7f00000000c0)={@void, @val={0x3, 0x3, 0x7, 0x81, 0x3, 0x1}, @ipv6=@generic={0x5, 0x6, "25c7aa", 0x8d, 0x0, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x84, 0x4, 0x1, 0xfe, 0x0, [@empty, @loopback]}], "0ace736481b6ba22307e83129d6a1d1a7aec85d3525a040606f454910c83067e91ce4614a932e32e82d7fece2380248dbbf519835ab7df0b6d51354cb358d40438f0610426badc7a07dce92dcd9a0fd8a87e9c7b34d980ca4cfc6a10fd4402715333cf6069"}}}, 0xbf) syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @broadcast}, @timestamp_reply}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0480, 0x0) (async) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x8914}, @val={0x2, 0x4, 0xff, 0xd82, 0x1, 0x40}, @llc={@llc={0x4, 0xe, "5b87", "3e5abf268cb062246598fa3611c78984ff0ba1d097df1cb9b4735bcb56d0319be6f5946380765bebe0306fc208483a17548e6a91c4cd0e5a964348d1082ef39a3d365dbe9241b53f662231f2b5f5a1a7f12ad769f849f77df16712fcf61c74bf65780479eee927b09a5acad24d4df3d98586e679e8d2e825639a9c0fb4cce6cd7fd33e282e1d8aac8bea391fa934164b2d4e33e66a187970664600e94fabd11f52c76096d449ee590e8d6a166d518b91fc545bedeb162c1fa32cef73c3388ec3f4ffd5d61ca4a333ff46d43d861a3052650f4dd2e7215f60a88f"}}}, 0xec) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x78000, 0x0) (async) write$tun(r1, &(0x7f00000000c0)={@void, @val={0x3, 0x3, 0x7, 0x81, 0x3, 0x1}, @ipv6=@generic={0x5, 0x6, "25c7aa", 0x8d, 0x0, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x84, 0x4, 0x1, 0xfe, 0x0, [@empty, @loopback]}], "0ace736481b6ba22307e83129d6a1d1a7aec85d3525a040606f454910c83067e91ce4614a932e32e82d7fece2380248dbbf519835ab7df0b6d51354cb358d40438f0610426badc7a07dce92dcd9a0fd8a87e9c7b34d980ca4cfc6a10fd4402715333cf6069"}}}, 0xbf) (async) 00:06:05 executing program 4: r0 = syz_io_uring_setup(0x66f0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000080)) r1 = eventfd(0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xffffffe9}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xfffffffffffffe0e, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL, @IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0xfffff801}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv4=@multicast2}]}]}, 0xfffffffffffffeea}, 0x1, 0x0, 0x0, 0xc804}, 0x40000c4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x600000000000000}], 0x2) 00:06:05 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x4004, @fd_index=0x1, 0x5, 0x7, 0x401, 0x1, 0x1, {0x1}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:05 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "b5dffa", 0xf9, 0x21, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e23, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) [ 1832.713621][ T3628] autofs4:pid:3628:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.11832), cmd(0xc0189375) [ 1832.727135][ T3628] autofs4:pid:3628:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 00:06:05 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x36, 0x1, 0x1ff, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$RTC_AIE_OFF(r0, 0x7002) (async) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) (rerun: 32) 00:06:05 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x700000000000000}], 0x2) 00:06:05 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x4004, @fd_index=0x1, 0x5, 0x7, 0x401, 0x1, 0x1, {0x1}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x4004, @fd_index=0x1, 0x5, 0x7, 0x401, 0x1, 0x1, {0x1}}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "b5dffa", 0xf9, 0x21, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e23, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000300)={0x1, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], &(0x7f00000002c0)=[0xfffffffffffffffc, 0xfffffffffffffffa, 0x9, 0x6, 0x9, 0x177d, 0x4508, 0x0]}, 0x20) 00:06:06 executing program 4: r0 = syz_io_uring_setup(0x66f0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000080)) eventfd(0x80) (async) r1 = eventfd(0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xffffffe9}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xfffffffffffffe0e, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL, @IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0xfffff801}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv4=@multicast2}]}]}, 0xfffffffffffffeea}, 0x1, 0x0, 0x0, 0xc804}, 0x40000c4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 1832.780531][ T3651] autofs4:pid:3651:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.11832), cmd(0xc0189375) [ 1832.794047][ T3651] autofs4:pid:3651:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x800000000000000}], 0x2) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x4004, @fd_index=0x1, 0x5, 0x7, 0x401, 0x1, 0x1, {0x1}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000300)={0x1, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], &(0x7f00000002c0)=[0xfffffffffffffffc, 0xfffffffffffffffa, 0x9, 0x6, 0x9, 0x177d, 0x4508, 0x0]}, 0x20) 00:06:06 executing program 4: r0 = syz_io_uring_setup(0x66f0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000080)) (async) r1 = eventfd(0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xffffffe9}}, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xfffffffffffffe0e, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL, @IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0xfffff801}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv4=@multicast2}]}]}, 0xfffffffffffffeea}, 0x1, 0x0, 0x0, 0xc804}, 0x40000c4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x23ff, &(0x7f0000000140)={0x0, 0x723a, 0x40, 0x3, 0xfa}, &(0x7f0000000080), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "b5dffa", 0xf9, 0x21, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e23, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0xc0000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0xd, 0x31, 0x8, 0x8, 0x3, 0x1, 0x4, 0x6e}) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYRES8=0x0]) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0)=r2, 0x1) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x900000000000000}], 0x2) 00:06:06 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd65}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4, 'nq\x00', 0x38, 0x4, 0x60}, 0x2c) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaabc2000806450000280000000000019078ffffffffffffffff0e009078000000000000000000000000003c7b005b5f58d5c491e2cc6a2a5c71c77590df7123d8b43b1333f807d75793cb5488765d9447fccf27468f6f234cb39bc9c66696d8abe1d3361554bb4411ac99327dcf84b1fbe5c7f97687e0dd8e"], 0x0) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x23ff, &(0x7f0000000140)={0x0, 0x723a, 0x40, 0x3, 0xfa}, &(0x7f0000000080), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:06 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0xc0000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0xd, 0x31, 0x8, 0x8, 0x3, 0x1, 0x4, 0x6e}) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYRES8=0x0]) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0)=r2, 0x1) syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0xc0000) (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0xd, 0x31, 0x8, 0x8, 0x3, 0x1, 0x4, 0x6e}) (async) syz_io_uring_setup(0x47b6, &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYRES8=0x0]) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0)=r2, 0x1) (async) 00:06:06 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd65}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4, 'nq\x00', 0x38, 0x4, 0x60}, 0x2c) (async) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaabc2000806450000280000000000019078ffffffffffffffff0e009078000000000000000000000000003c7b005b5f58d5c491e2cc6a2a5c71c77590df7123d8b43b1333f807d75793cb5488765d9447fccf27468f6f234cb39bc9c66696d8abe1d3361554bb4411ac99327dcf84b1fbe5c7f97687e0dd8e"], 0x0) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000300)={0x1, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], &(0x7f00000002c0)=[0xfffffffffffffffc, 0xfffffffffffffffa, 0x9, 0x6, 0x9, 0x177d, 0x4508, 0x0]}, 0x20) 00:06:06 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd65}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4, 'nq\x00', 0x38, 0x4, 0x60}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4, 'nq\x00', 0x38, 0x4, 0x60}, 0x2c) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaabc2000806450000280000000000019078ffffffffffffffff0e009078000000000000000000000000003c7b005b5f58d5c491e2cc6a2a5c71c77590df7123d8b43b1333f807d75793cb5488765d9447fccf27468f6f234cb39bc9c66696d8abe1d3361554bb4411ac99327dcf84b1fbe5c7f97687e0dd8e"], 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0xa00000000000000}], 0x2) 00:06:06 executing program 4: syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0xc0000) (async) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0xc0000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0xd, 0x31, 0x8, 0x8, 0x3, 0x1, 0x4, 0x6e}) (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0xd, 0x31, 0x8, 0x8, 0x3, 0x1, 0x4, 0x6e}) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYRES8=0x0]) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0)=r2, 0x1) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x23ff, &(0x7f0000000140)={0x0, 0x723a, 0x40, 0x3, 0xfa}, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000000200), &(0x7f00000000c0)) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000240)={0x2, 0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/66, 0x42}, {&(0x7f0000001680)=""/4096, 0x1000}], &(0x7f0000000200)=[0x9, 0x0, 0xffffffff80000001]}, 0x20) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0xb00000000000000}], 0x2) 00:06:06 executing program 4: r0 = syz_io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x7ec8, 0x1000, 0x1, 0x9a}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x4, 0x0, r0}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0), 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x51bc, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r0, r1, r1, r0], 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[r1, r0, r0, r0]}, 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "b5dffa", 0xf9, 0x21, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e23, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0xc00000000000000}], 0x2) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000240)={0x2, 0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/66, 0x42}, {&(0x7f0000001680)=""/4096, 0x1000}], &(0x7f0000000200)=[0x9, 0x0, 0xffffffff80000001]}, 0x20) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "b5dffa", 0xf9, 0x21, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e23, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 4: r0 = syz_io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x7ec8, 0x1000, 0x1, 0x9a}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x4, 0x0, r0}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0), 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x51bc, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r1 = syz_io_uring_setup(0x51bc, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r0, r1, r1, r0], 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[r1, r0, r0, r0]}, 0x4) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[r1, r0, r0, r0]}, 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0xd00000000000000}], 0x2) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "b5dffa", 0xf9, 0x21, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e23, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000240)={0x2, 0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/66, 0x42}, {&(0x7f0000001680)=""/4096, 0x1000}], &(0x7f0000000200)=[0x9, 0x0, 0xffffffff80000001]}, 0x20) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:06 executing program 4: syz_io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x7ec8, 0x1000, 0x1, 0x9a}, &(0x7f0000000180), &(0x7f00000001c0)) (async) r0 = syz_io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x7ec8, 0x1000, 0x1, 0x9a}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x4, 0x0, r0}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0), 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:06 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0xe00000000000000}], 0x2) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x51bc, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r0, r1, r1, r0], 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[r1, r0, r0, r0]}, 0x4) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x3e97, 0x800, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xb, 0x44010, r0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0xf00000000000000}], 0x2) 00:06:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002900), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000029c0)={0x28, r1, 0x15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x7, &(0x7f00000002c0)=""/101, &(0x7f0000000340)=0x65) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x464, r4, 0x201, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x39c, 0x8, 0x0, 0x1, [{0x314, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1dde, @private2, 0x200}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7f, @private0, 0x1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6574cb9ce24d8484b3eeb000ec5dcb8de47363ba40d01018959ade9a1cca87a9"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x20}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "17b9e8b1464f96740c33f7ceed6737c5892b94beff9da810779a416519ff8cb3"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80de74a4e5d1f71cf51a3fc4f48a329892a0456457cfe6a1efeb1cd60baba245"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffc}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 00:06:06 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x3e97, 0x800, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xb, 0x44010, r0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1000000000000000}], 0x2) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b5dffa", 0xf9, 0x21, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e23, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x3e97, 0x800, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xb, 0x44010, r0, 0x0) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (rerun: 64) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002900), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000029c0)={0x28, r1, 0x15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) (rerun: 64) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x7, &(0x7f00000002c0)=""/101, &(0x7f0000000340)=0x65) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x464, r4, 0x201, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x39c, 0x8, 0x0, 0x1, [{0x314, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1dde, @private2, 0x200}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7f, @private0, 0x1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6574cb9ce24d8484b3eeb000ec5dcb8de47363ba40d01018959ade9a1cca87a9"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x20}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "17b9e8b1464f96740c33f7ceed6737c5892b94beff9da810779a416519ff8cb3"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80de74a4e5d1f71cf51a3fc4f48a329892a0456457cfe6a1efeb1cd60baba245"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffc}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b5dffa", 0xf9, 0x21, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e23, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1100000000000000}], 0x2) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b5dffa", 0xf9, 0x21, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1200000000000000}], 0x2) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b5dffa", 0xf9, 0x21, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 3: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1300000000000000}], 0x2) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b5dffa", 0xf9, 0x21, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (rerun: 32) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) 00:06:06 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002900), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000029c0)={0x28, r1, 0x15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x7, &(0x7f00000002c0)=""/101, &(0x7f0000000340)=0x65) (async) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x7, &(0x7f00000002c0)=""/101, &(0x7f0000000340)=0x65) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x464, r4, 0x201, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x39c, 0x8, 0x0, 0x1, [{0x314, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1dde, @private2, 0x200}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7f, @private0, 0x1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6574cb9ce24d8484b3eeb000ec5dcb8de47363ba40d01018959ade9a1cca87a9"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x20}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "17b9e8b1464f96740c33f7ceed6737c5892b94beff9da810779a416519ff8cb3"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80de74a4e5d1f71cf51a3fc4f48a329892a0456457cfe6a1efeb1cd60baba245"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffc}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x464, r4, 0x201, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x39c, 0x8, 0x0, 0x1, [{0x314, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1dde, @private2, 0x200}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7f, @private0, 0x1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6574cb9ce24d8484b3eeb000ec5dcb8de47363ba40d01018959ade9a1cca87a9"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x20}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "17b9e8b1464f96740c33f7ceed6737c5892b94beff9da810779a416519ff8cb3"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80de74a4e5d1f71cf51a3fc4f48a329892a0456457cfe6a1efeb1cd60baba245"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffc}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b5dffa", 0xf9, 0x21, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1400000000000000}], 0x2) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x3f, 0x642400) ioctl$RTC_VL_CLR(r1, 0x7014) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b5dffa", 0xf9, 0x21, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1bb9b0", 0xc1, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1500000000000000}], 0x2) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1600000000000000}], 0x2) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x3f, 0x642400) ioctl$RTC_VL_CLR(r1, 0x7014) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/91, 0x5b}], 0x1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="ff7ec2b9", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf2505000000080006000200000038000380080001000000000014000600fc01000000000000000000000000000108000100020000000800010001000000060007004e220000080006005a0000000800050000000080"], 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000500)={0xb500000, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f0000000380)=""/217, 0xd9}], &(0x7f00000004c0)=[0x10000, 0xc4e], 0x3}, 0x20) 00:06:06 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000540)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/113, 0x71}, {&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000600)=""/181, 0xb5}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/178, 0xb2}], 0xa}, 0x22) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) recvmsg$can_raw(r2, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xe7239c67fea66513}, 0xc, &(0x7f0000000580)={&(0x7f0000000a80)={0xe4, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9d58}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc0000000}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1700000000000000}], 0x2) 00:06:06 executing program 1: syz_emit_ethernet(0x12f, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b5dffa", 0xf9, 0x21, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1bb9b0", 0x0, "fc3fe7"}, "a6a55279a49defe5e5c5216d3e195bee427574459b2ab0d57f2fd94f02c542bb38fc806a5a564139c0f8cd58fa7f798f50df10edc257040476b20ac0e9c50e80021c7224a83f664ae19c0ec135ba166e806cd0dc74159abbd30248333c1cf87a6866b906418c41381413ce80b8252143779e28c4a1e79f339357c1e58703d0f13c74c1fca6eaffd5738d6735171bc36faeeac01b4ace302fb96db9f35ac213a7853201b031edfd0567eb0a841aab535edcf58a797d8dfaea75d49e1a51baa6346745016dd7b88ae304171d8859d4707a08b35d0f6f76d5fa582551191e7aac0a8a04101e3235e069c8"}}}}}}, 0x0) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x3f, 0x642400) ioctl$RTC_VL_CLR(r1, 0x7014) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/91, 0x5b}], 0x1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="ff7ec2b9", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf2505000000080006000200000038000380080001000000000014000600fc01000000000000000000000000000108000100020000000800010001000000060007004e220000080006005a0000000800050000000080"], 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000500)={0xb500000, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f0000000380)=""/217, 0xd9}], &(0x7f00000004c0)=[0x10000, 0xc4e], 0x3}, 0x20) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:06:06 executing program 1: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b5dffa", 0x10, 0x21, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1bb9b0", 0x0, "fc3fe7"}}}}}}}, 0x0) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1800000000000000}], 0x2) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/91, 0x5b}], 0x1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="ff7ec2b9", @ANYRES16=0x0, @ANYBLOB="100027bd7000fcdbdf2505000000080006000200000038000380080001000000000014000600fc01000000000000000000000000000108000100020000000800010001000000060007004e220000080006005a0000000800050000000080"], 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000500)={0xb500000, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f0000000380)=""/217, 0xd9}], &(0x7f00000004c0)=[0x10000, 0xc4e], 0x3}, 0x20) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:06:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x557c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000100)="f143c4d401d796d2889842e8d8f15ed6455e97dfea2f56524ebb95748320e40dd46cbf7965b1e76aa7f2987586d1426fc97ce74d10c4dc93e42ca816d6d6de1870503b65f4f6f247efd65cb9a58d2d14aad69a51483c3405f137fd6b78ce00e47cd1dceb", 0x64}, {&(0x7f0000000180)="a6b8d82fd61d0a7c09c3cf7936076609300cdf51c9fe017c64e9f93be2b88003e6d8eafb9f9336e17f96771882aec437bc189cc81455071dbdd87b68bbbbaa2913cea3135e432ce1b8e74474ef62a7e255e8f97b37a6447e6f2afe28a036b592daf9248cafb60ce38b200243fa83ca64e2706ba8fbc0b8095f142d773476f9854ae0bc2c42b1b4276faf3ade28aa4392be18355acbef10bc914ae774e07d3a0ef192081e0f36aefe5bfa2dbf9643d4068b8843203933c4430ce99efb22dd2611b472426b2f4a570d768efb", 0xcb, 0x3}, {&(0x7f0000000280), 0x0, 0x2}, {&(0x7f00000002c0)="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", 0xfd, 0x2}, {&(0x7f00000003c0)="df99309d964884c54a1dd312458560fe28865a36d8d236b31912a9013c9780ae4a5e4585b255acd4f18873f1de417b94048f7f5e6edafdb58d5ed27dcfdc1c4571d5e9e1e2eb6638fce3590f6f73a3d4068d9d68ef405b8dc0c238d6ab740e84093a6612d5df94e1fc8582b02fa161cb4a54c587891277d5e55aca8b183451b5aac4b22a9f51439b5f4d3b36e54dc3325036d4a70ad67fa5edf8ee2e31127d81d7e424162f8daee5bd1e72a068872691bb3cb5beccd206989e225c421689c6b38a122bddf283d2b8c3c4976bbdd766056c24", 0xd2, 0x2}]}, 0x5}, 0x1) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1900000000000000}], 0x2) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0x1a00000000000000}], 0x2) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47ba, &(0x7f0000000000)={0x0, 0xe10a, 0x400, 0x2, 0x19f}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000004c0)={0x1, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/227, 0xe3}], &(0x7f0000000480)=[0x8, 0x7]}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="dd7301faffff000000001800", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000300)={0x3, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000240)=""/17, 0x11}], &(0x7f00000002c0)=[0x55a0, 0xfffffffffffffffb, 0x6]}, 0x20) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000008c0)=[{0x4, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000300)=""/45, 0x2d}], &(0x7f0000000480)=[0x1, 0x8000000000000001]}, {0x4, 0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/67, 0x43}, {&(0x7f0000000600)=""/129, 0x81}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f00000007c0)=""/219, 0xdb}], &(0x7f0000000580)=[0xd7, 0x10001]}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000003ac0)=[{0x5, 0x1, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/21, 0x15}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f00000009c0)=""/253, 0xfd}, {&(0x7f0000000ac0)=""/195, 0xc3}, {&(0x7f0000000bc0)=""/216, 0xd8}], &(0x7f0000000d40)=[0x6]}, {0x9, 0x1, 0x0, &(0x7f0000001340)=[{&(0x7f0000000d80)=""/187, 0xbb}, {&(0x7f0000000e40)=""/253, 0xfd}, {&(0x7f0000000f40)=""/248, 0xf8}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000001040)=""/98, 0x62}, {&(0x7f00000010c0)=""/228, 0xe4}, {&(0x7f00000011c0)=""/131, 0x83}, {&(0x7f0000001280)=""/140, 0x8c}], &(0x7f0000001400)=[0x7f]}, {0x1, 0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001440)=""/42, 0x2a}], &(0x7f00000014c0)=[0xffffffffffffffff]}, {0x2, 0x1, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/110, 0x6e}, {&(0x7f0000003680)=""/201, 0xc9}], &(0x7f0000001600)=[0x9]}, {0x2, 0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003780)=""/186, 0xba}, {&(0x7f0000003840)=""/63, 0x3f}], &(0x7f00000038c0)=[0xffffffff, 0xfffffffffffffffd, 0x4, 0x2, 0x9a9]}, {0x2, 0x1, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003900)=""/164, 0xa4}, {&(0x7f00000039c0)=""/85, 0x55}], &(0x7f0000003a80)=[0x0, 0x6, 0x2, 0x800, 0x20, 0x5]}], 0x6) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000004f40)={0x5, 0x1, 0x0, &(0x7f0000004e80)=[{&(0x7f0000003b80)=""/37, 0x25}, {&(0x7f0000003bc0)=""/241, 0xf1}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/252, 0xfc}, {&(0x7f0000004dc0)=""/192, 0xc0}], &(0x7f0000004f00)=[0x100000000, 0x4, 0x7fff]}, 0x20) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0, 0xffffffff00000000}], 0x2) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47ba, &(0x7f0000000000)={0x0, 0xe10a, 0x400, 0x2, 0x19f}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000004c0)={0x1, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/227, 0xe3}], &(0x7f0000000480)=[0x8, 0x7]}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="dd7301faffff000000001800", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000300)={0x3, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000240)=""/17, 0x11}], &(0x7f00000002c0)=[0x55a0, 0xfffffffffffffffb, 0x6]}, 0x20) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000008c0)=[{0x4, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000300)=""/45, 0x2d}], &(0x7f0000000480)=[0x1, 0x8000000000000001]}, {0x4, 0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/67, 0x43}, {&(0x7f0000000600)=""/129, 0x81}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f00000007c0)=""/219, 0xdb}], &(0x7f0000000580)=[0xd7, 0x10001]}], 0x2) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000003ac0)=[{0x5, 0x1, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/21, 0x15}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f00000009c0)=""/253, 0xfd}, {&(0x7f0000000ac0)=""/195, 0xc3}, {&(0x7f0000000bc0)=""/216, 0xd8}], &(0x7f0000000d40)=[0x6]}, {0x9, 0x1, 0x0, &(0x7f0000001340)=[{&(0x7f0000000d80)=""/187, 0xbb}, {&(0x7f0000000e40)=""/253, 0xfd}, {&(0x7f0000000f40)=""/248, 0xf8}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000001040)=""/98, 0x62}, {&(0x7f00000010c0)=""/228, 0xe4}, {&(0x7f00000011c0)=""/131, 0x83}, {&(0x7f0000001280)=""/140, 0x8c}], &(0x7f0000001400)=[0x7f]}, {0x1, 0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001440)=""/42, 0x2a}], &(0x7f00000014c0)=[0xffffffffffffffff]}, {0x2, 0x1, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/110, 0x6e}, {&(0x7f0000003680)=""/201, 0xc9}], &(0x7f0000001600)=[0x9]}, {0x2, 0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003780)=""/186, 0xba}, {&(0x7f0000003840)=""/63, 0x3f}], &(0x7f00000038c0)=[0xffffffff, 0xfffffffffffffffd, 0x4, 0x2, 0x9a9]}, {0x2, 0x1, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003900)=""/164, 0xa4}, {&(0x7f00000039c0)=""/85, 0x55}], &(0x7f0000003a80)=[0x0, 0x6, 0x2, 0x800, 0x20, 0x5]}], 0x6) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000004f40)={0x5, 0x1, 0x0, &(0x7f0000004e80)=[{&(0x7f0000003b80)=""/37, 0x25}, {&(0x7f0000003bc0)=""/241, 0xf1}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/252, 0xfc}, {&(0x7f0000004dc0)=""/192, 0xc0}], &(0x7f0000004f00)=[0x100000000, 0x4, 0x7fff]}, 0x20) 00:06:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x557c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000100)="f143c4d401d796d2889842e8d8f15ed6455e97dfea2f56524ebb95748320e40dd46cbf7965b1e76aa7f2987586d1426fc97ce74d10c4dc93e42ca816d6d6de1870503b65f4f6f247efd65cb9a58d2d14aad69a51483c3405f137fd6b78ce00e47cd1dceb", 0x64}, {&(0x7f0000000180)="a6b8d82fd61d0a7c09c3cf7936076609300cdf51c9fe017c64e9f93be2b88003e6d8eafb9f9336e17f96771882aec437bc189cc81455071dbdd87b68bbbbaa2913cea3135e432ce1b8e74474ef62a7e255e8f97b37a6447e6f2afe28a036b592daf9248cafb60ce38b200243fa83ca64e2706ba8fbc0b8095f142d773476f9854ae0bc2c42b1b4276faf3ade28aa4392be18355acbef10bc914ae774e07d3a0ef192081e0f36aefe5bfa2dbf9643d4068b8843203933c4430ce99efb22dd2611b472426b2f4a570d768efb", 0xcb, 0x3}, {&(0x7f0000000280), 0x0, 0x2}, {&(0x7f00000002c0)="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", 0xfd, 0x2}, {&(0x7f00000003c0)="df99309d964884c54a1dd312458560fe28865a36d8d236b31912a9013c9780ae4a5e4585b255acd4f18873f1de417b94048f7f5e6edafdb58d5ed27dcfdc1c4571d5e9e1e2eb6638fce3590f6f73a3d4068d9d68ef405b8dc0c238d6ab740e84093a6612d5df94e1fc8582b02fa161cb4a54c587891277d5e55aca8b183451b5aac4b22a9f51439b5f4d3b36e54dc3325036d4a70ad67fa5edf8ee2e31127d81d7e424162f8daee5bd1e72a068872691bb3cb5beccd206989e225c421689c6b38a122bddf283d2b8c3c4976bbdd766056c24", 0xd2, 0x2}]}, 0x5}, 0x1) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r5) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r6, 0x300, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r3, r5, 0x0, 0x0, 0x4}, 0x48) r7 = syz_io_uring_setup(0x27e1, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x60, 0x0, r5, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r8}}) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47ba, &(0x7f0000000000)={0x0, 0xe10a, 0x400, 0x2, 0x19f}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000004c0)={0x1, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/227, 0xe3}], &(0x7f0000000480)=[0x8, 0x7]}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="dd7301faffff000000001800", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000300)={0x3, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000240)=""/17, 0x11}], &(0x7f00000002c0)=[0x55a0, 0xfffffffffffffffb, 0x6]}, 0x20) 00:06:06 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000008c0)=[{0x4, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000300)=""/45, 0x2d}], &(0x7f0000000480)=[0x1, 0x8000000000000001]}, {0x4, 0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/67, 0x43}, {&(0x7f0000000600)=""/129, 0x81}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f00000007c0)=""/219, 0xdb}], &(0x7f0000000580)=[0xd7, 0x10001]}], 0x2) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000003ac0)=[{0x5, 0x1, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/21, 0x15}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f00000009c0)=""/253, 0xfd}, {&(0x7f0000000ac0)=""/195, 0xc3}, {&(0x7f0000000bc0)=""/216, 0xd8}], &(0x7f0000000d40)=[0x6]}, {0x9, 0x1, 0x0, &(0x7f0000001340)=[{&(0x7f0000000d80)=""/187, 0xbb}, {&(0x7f0000000e40)=""/253, 0xfd}, {&(0x7f0000000f40)=""/248, 0xf8}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000001040)=""/98, 0x62}, {&(0x7f00000010c0)=""/228, 0xe4}, {&(0x7f00000011c0)=""/131, 0x83}, {&(0x7f0000001280)=""/140, 0x8c}], &(0x7f0000001400)=[0x7f]}, {0x1, 0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001440)=""/42, 0x2a}], &(0x7f00000014c0)=[0xffffffffffffffff]}, {0x2, 0x1, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/110, 0x6e}, {&(0x7f0000003680)=""/201, 0xc9}], &(0x7f0000001600)=[0x9]}, {0x2, 0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003780)=""/186, 0xba}, {&(0x7f0000003840)=""/63, 0x3f}], &(0x7f00000038c0)=[0xffffffff, 0xfffffffffffffffd, 0x4, 0x2, 0x9a9]}, {0x2, 0x1, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003900)=""/164, 0xa4}, {&(0x7f00000039c0)=""/85, 0x55}], &(0x7f0000003a80)=[0x0, 0x6, 0x2, 0x800, 0x20, 0x5]}], 0x6) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000004f40)={0x5, 0x1, 0x0, &(0x7f0000004e80)=[{&(0x7f0000003b80)=""/37, 0x25}, {&(0x7f0000003bc0)=""/241, 0xf1}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/252, 0xfc}, {&(0x7f0000004dc0)=""/192, 0xc0}], &(0x7f0000004f00)=[0x100000000, 0x4, 0x7fff]}, 0x20) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_setup(0x7669, &(0x7f0000000140)={0x0, 0xae0b, 0x4, 0x1, 0x2a0, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x557c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000100)="f143c4d401d796d2889842e8d8f15ed6455e97dfea2f56524ebb95748320e40dd46cbf7965b1e76aa7f2987586d1426fc97ce74d10c4dc93e42ca816d6d6de1870503b65f4f6f247efd65cb9a58d2d14aad69a51483c3405f137fd6b78ce00e47cd1dceb", 0x64}, {&(0x7f0000000180)="a6b8d82fd61d0a7c09c3cf7936076609300cdf51c9fe017c64e9f93be2b88003e6d8eafb9f9336e17f96771882aec437bc189cc81455071dbdd87b68bbbbaa2913cea3135e432ce1b8e74474ef62a7e255e8f97b37a6447e6f2afe28a036b592daf9248cafb60ce38b200243fa83ca64e2706ba8fbc0b8095f142d773476f9854ae0bc2c42b1b4276faf3ade28aa4392be18355acbef10bc914ae774e07d3a0ef192081e0f36aefe5bfa2dbf9643d4068b8843203933c4430ce99efb22dd2611b472426b2f4a570d768efb", 0xcb, 0x3}, {&(0x7f0000000280), 0x0, 0x2}, {&(0x7f00000002c0)="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", 0xfd, 0x2}, {&(0x7f00000003c0)="df99309d964884c54a1dd312458560fe28865a36d8d236b31912a9013c9780ae4a5e4585b255acd4f18873f1de417b94048f7f5e6edafdb58d5ed27dcfdc1c4571d5e9e1e2eb6638fce3590f6f73a3d4068d9d68ef405b8dc0c238d6ab740e84093a6612d5df94e1fc8582b02fa161cb4a54c587891277d5e55aca8b183451b5aac4b22a9f51439b5f4d3b36e54dc3325036d4a70ad67fa5edf8ee2e31127d81d7e424162f8daee5bd1e72a068872691bb3cb5beccd206989e225c421689c6b38a122bddf283d2b8c3c4976bbdd766056c24", 0xd2, 0x2}]}, 0x5}, 0x1) 00:06:06 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r5) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r5) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r6, 0x300, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r6, 0x300, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r3, r5, 0x0, 0x0, 0x4}, 0x48) syz_io_uring_setup(0x27e1, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r7 = syz_io_uring_setup(0x27e1, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x60, 0x0, r5, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r8}}) 00:06:06 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_setup(0x7669, &(0x7f0000000140)={0x0, 0xae0b, 0x4, 0x1, 0x2a0, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], &(0x7f0000001600)=[0x800], 0x1}, 0x20) r1 = syz_io_uring_setup(0x42ce, &(0x7f0000000000)={0x0, 0xcfa1, 0x400, 0x4, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000280)=[{0x1, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/4, 0x4}], &(0x7f0000000240)=[0x4cae, 0x7]}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="04009f7075fa8b66696c653000"]) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x557c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:07 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r5) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r5) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r6, 0x300, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r3, r5, 0x0, 0x0, 0x4}, 0x48) syz_io_uring_setup(0x27e1, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r7 = syz_io_uring_setup(0x27e1, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x60, 0x0, r5, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r8}}) 00:06:07 executing program 0: syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f0000000100), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_setup(0x7669, &(0x7f0000000140)={0x0, 0xae0b, 0x4, 0x1, 0x2a0, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x557c}, &(0x7f0000000080), &(0x7f00000000c0)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:07 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000540)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/113, 0x71}, {&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000600)=""/181, 0xb5}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/178, 0xb2}], 0xa}, 0x22) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) recvmsg$can_raw(r2, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xe7239c67fea66513}, 0xc, &(0x7f0000000580)={&(0x7f0000000a80)={0xe4, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9d58}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc0000000}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) 00:06:07 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], &(0x7f0000001600)=[0x800], 0x1}, 0x20) (rerun: 32) r1 = syz_io_uring_setup(0x42ce, &(0x7f0000000000)={0x0, 0xcfa1, 0x400, 0x4, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000280)=[{0x1, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/4, 0x4}], &(0x7f0000000240)=[0x4cae, 0x7]}], 0x1) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="04009f7075fa8b66696c653000"]) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:07 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:07 executing program 0: r0 = syz_io_uring_setup(0x7c8e, &(0x7f0000000100)={0x0, 0xff14, 0x2, 0x1, 0x1c0}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x6124, &(0x7f0000000000)={0x0, 0x0, 0x88, 0x0, 0x353, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:07 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:07 executing program 0: r0 = syz_io_uring_setup(0x7c8e, &(0x7f0000000100)={0x0, 0xff14, 0x2, 0x1, 0x1c0}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x6124, &(0x7f0000000000)={0x0, 0x0, 0x88, 0x0, 0x353, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) syz_io_uring_setup(0x7c8e, &(0x7f0000000100)={0x0, 0xff14, 0x2, 0x1, 0x1c0}, &(0x7f0000000180), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x6124, &(0x7f0000000000)={0x0, 0x0, 0x88, 0x0, 0x353, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) (async) 00:06:07 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], &(0x7f0000001600)=[0x800], 0x1}, 0x20) r1 = syz_io_uring_setup(0x42ce, &(0x7f0000000000)={0x0, 0xcfa1, 0x400, 0x4, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000280)=[{0x1, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/4, 0x4}], &(0x7f0000000240)=[0x4cae, 0x7]}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="04009f7075fa8b66696c653000"]) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:07 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000540)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/113, 0x71}, {&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000600)=""/181, 0xb5}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/178, 0xb2}], 0xa}, 0x22) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) recvmsg$can_raw(r2, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xe7239c67fea66513}, 0xc, &(0x7f0000000580)={&(0x7f0000000a80)={0xe4, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9d58}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc0000000}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) 00:06:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:07 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00'}) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (rerun: 32) 00:06:07 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 2: r0 = syz_io_uring_setup(0x47b7, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:07 executing program 0: r0 = syz_io_uring_setup(0x7c8e, &(0x7f0000000100)={0x0, 0xff14, 0x2, 0x1, 0x1c0}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x6124, &(0x7f0000000000)={0x0, 0x0, 0x88, 0x0, 0x353, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) syz_io_uring_setup(0x7c8e, &(0x7f0000000100)={0x0, 0xff14, 0x2, 0x1, 0x1c0}, &(0x7f0000000180), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x6124, &(0x7f0000000000)={0x0, 0x0, 0x88, 0x0, 0x353, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) (async) 00:06:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:07 executing program 2: r0 = syz_io_uring_setup(0x47b7, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:07 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:07 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 2: r0 = syz_io_uring_setup(0x47b7, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:07 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000500)=[{0x5, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f0000000200)=""/158, 0x9e}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/89, 0x59}], &(0x7f00000004c0)=[0x767, 0x8, 0x4, 0x9, 0x2, 0x6, 0x8, 0x8]}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x5, 0x1ff], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:07 executing program 2: r0 = io_uring_setup(0x9e9, &(0x7f0000000100)={0x0, 0xf5d7, 0x40, 0x0, 0x293}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 00:06:07 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (rerun: 32) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x5, 0x1ff], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000500)=[{0x5, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f0000000200)=""/158, 0x9e}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/89, 0x59}], &(0x7f00000004c0)=[0x767, 0x8, 0x4, 0x9, 0x2, 0x6, 0x8, 0x8]}], 0x1) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 2: r0 = io_uring_setup(0x9e9, &(0x7f0000000100)={0x0, 0xf5d7, 0x40, 0x0, 0x293}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 00:06:07 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x5, 0x1ff], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:07 executing program 2: r0 = io_uring_setup(0x9e9, &(0x7f0000000100)={0x0, 0xf5d7, 0x40, 0x0, 0x293}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 00:06:07 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000500)=[{0x5, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f0000000200)=""/158, 0x9e}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/89, 0x59}], &(0x7f00000004c0)=[0x767, 0x8, 0x4, 0x9, 0x2, 0x6, 0x8, 0x8]}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_io_uring_setup(0x4197, &(0x7f0000000000)={0x0, 0x8b1f, 0x8a2, 0x0, 0x10004, 0x0, r0}, &(0x7f0000000300), &(0x7f00000000c0)) syz_io_uring_setup(0x4f50, &(0x7f0000000240)={0x0, 0x7485, 0x2, 0x1, 0x200027f, 0x0, r1}, &(0x7f0000000080), &(0x7f00000002c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:07 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:07 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000240)={0x8001, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000140)=""/68, 0x44}, {&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f0000000200), 0x3}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:07 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x253b, &(0x7f0000000100)={0x0, 0x7700, 0x8, 0x2, 0x350}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000200)="f4157c08c567c101048bddf788274259ff5c0356dd3f7bc3bbe5fe0cd06dddfe67f0a5ccabeb794c61f12682dbd0c14a4dfd1bbdad21ad850b79fc9324bd815c1bedb2ca3bbe4305ca121a49f0ef121941645908e9dfdffc2737b9ad69a197b76224cdf59135fb774e674120b65b0d3bb1879f81725425c1752d352f01b1b221fba054b1fcfb1c7cb100644ef2febb23f330631c66f6ff", 0x97) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_io_uring_setup(0x4197, &(0x7f0000000000)={0x0, 0x8b1f, 0x8a2, 0x0, 0x10004, 0x0, r0}, &(0x7f0000000300), &(0x7f00000000c0)) syz_io_uring_setup(0x4f50, &(0x7f0000000240)={0x0, 0x7485, 0x2, 0x1, 0x200027f, 0x0, r1}, &(0x7f0000000080), &(0x7f00000002c0)) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:07 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000240)={0x8001, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000140)=""/68, 0x44}, {&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f0000000200), 0x3}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:07 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_io_uring_setup(0x4197, &(0x7f0000000000)={0x0, 0x8b1f, 0x8a2, 0x0, 0x10004, 0x0, r0}, &(0x7f0000000300), &(0x7f00000000c0)) syz_io_uring_setup(0x4f50, &(0x7f0000000240)={0x0, 0x7485, 0x2, 0x1, 0x200027f, 0x0, r1}, &(0x7f0000000080), &(0x7f00000002c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_io_uring_setup(0x4197, &(0x7f0000000000)={0x0, 0x8b1f, 0x8a2, 0x0, 0x10004, 0x0, r0}, &(0x7f0000000300), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x4f50, &(0x7f0000000240)={0x0, 0x7485, 0x2, 0x1, 0x200027f, 0x0, r1}, &(0x7f0000000080), &(0x7f00000002c0)) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) 00:06:07 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000240)={0x8001, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000140)=""/68, 0x44}, {&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f0000000200), 0x3}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:08 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], &(0x7f0000001600)=[0x800], 0x1}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=@bloom_filter={0x1e, 0x80, 0x0, 0x8000, 0x3010, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xb}, 0x48) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000002580)=[r1], 0x1) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xa9ac, 0x0, 0x0, 0x2fa}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003d00)=[{0x1, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/91, 0x5b}], &(0x7f00000001c0)=[0x0, 0x2, 0x8, 0xb9, 0x100, 0x1]}, {0x3, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000280)=""/183, 0xb7}], &(0x7f0000000380)=[0x401]}, {0x7, 0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f0000000600)=""/176, 0xb0}, {&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f0000000740)=""/233, 0xe9}, {&(0x7f0000000840)=""/97, 0x61}], &(0x7f0000000940)=[0x0, 0xffffffffffff2b47, 0x3d9a, 0x9, 0x7, 0x6, 0xffffffffffffffff, 0x1]}, {0x0, 0x1, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)=[0x7, 0x5, 0x9, 0xffff, 0x3, 0x100000001]}, {0x6, 0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b40)=""/173, 0xad}, {&(0x7f0000000c00)=""/253, 0xfd}, {&(0x7f0000000d00)=""/20, 0x14}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/91, 0x5b}, {&(0x7f0000001dc0)=""/72, 0x48}], &(0x7f0000001ec0)=[0x1]}, {0x3, 0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001f00)=""/244, 0xf4}, {&(0x7f0000002000)=""/199, 0xc7}, {&(0x7f0000002100)=""/147, 0x93}], &(0x7f0000002200)=[0x7f, 0x2, 0x8, 0x10001]}, {0xa, 0x1, 0x0, &(0x7f00000038c0)=[{&(0x7f0000002240)=""/208, 0xd0}, {&(0x7f0000002340)=""/78, 0x4e}, {&(0x7f00000023c0)=""/137, 0x89}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/152, 0x98}, {&(0x7f0000002580)}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/252, 0xfc}, {&(0x7f00000036c0)=""/193, 0xc1}, {&(0x7f00000037c0)=""/250, 0xfa}], &(0x7f0000003980)=[0x6, 0x2, 0x8, 0xffffffff, 0x3]}, {0x2, 0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000003a80)=""/110, 0x6e}], &(0x7f0000003b40)=[0xffffffff, 0x8000000000000000]}, {0x1, 0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003b80)=""/237, 0xed}], &(0x7f0000003cc0)=[0x3]}], 0x9) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 00:06:08 executing program 1: r0 = socket(0x0, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:08 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 00:06:08 executing program 2: r0 = syz_io_uring_setup(0x47b4, &(0x7f0000000100)={0x0, 0xa40e, 0x400, 0xfffffffe, 0x10d}, &(0x7f0000000080), 0xfffffffffffffffd) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'security\x00', 0x0, [0x8, 0x239, 0x1, 0x8001, 0xeed]}, &(0x7f0000000380)=0x54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0x4b49, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x19f1, 0xfffffffffffff4fd, 0x80, 0x81, 0x3, 0x5]}, &(0x7f0000000280)=0x78) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3, 0xee00}}, './file0\x00'}) setsockopt$inet_buf(r1, 0x0, 0x31, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0, r0, r1, r0, r0, r0], 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0x89, r5, r4}, {0x9, 0x3, 0x4, 0x5, 0x0, 0x6, 0x7f0000000, 0x4}, {0x7fffffffffffffff, 0x5, 0x3, 0x100000001}, 0x8b9, 0x6e6bb6, 0x2, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4d4, 0xff}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3507, 0x0, 0x1, 0x73, 0xffffffe0, 0x1}}, 0xe8) 00:06:08 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x253b, &(0x7f0000000100)={0x0, 0x7700, 0x8, 0x2, 0x350}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000200)="f4157c08c567c101048bddf788274259ff5c0356dd3f7bc3bbe5fe0cd06dddfe67f0a5ccabeb794c61f12682dbd0c14a4dfd1bbdad21ad850b79fc9324bd815c1bedb2ca3bbe4305ca121a49f0ef121941645908e9dfdffc2737b9ad69a197b76224cdf59135fb774e674120b65b0d3bb1879f81725425c1752d352f01b1b221fba054b1fcfb1c7cb100644ef2febb23f330631c66f6ff", 0x97) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000200)="f4157c08c567c101048bddf788274259ff5c0356dd3f7bc3bbe5fe0cd06dddfe67f0a5ccabeb794c61f12682dbd0c14a4dfd1bbdad21ad850b79fc9324bd815c1bedb2ca3bbe4305ca121a49f0ef121941645908e9dfdffc2737b9ad69a197b76224cdf59135fb774e674120b65b0d3bb1879f81725425c1752d352f01b1b221fba054b1fcfb1c7cb100644ef2febb23f330631c66f6ff", 0x97) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:08 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 00:06:08 executing program 1: r0 = socket(0x0, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:08 executing program 0: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x253b, &(0x7f0000000100)={0x0, 0x7700, 0x8, 0x2, 0x350}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000200)="f4157c08c567c101048bddf788274259ff5c0356dd3f7bc3bbe5fe0cd06dddfe67f0a5ccabeb794c61f12682dbd0c14a4dfd1bbdad21ad850b79fc9324bd815c1bedb2ca3bbe4305ca121a49f0ef121941645908e9dfdffc2737b9ad69a197b76224cdf59135fb774e674120b65b0d3bb1879f81725425c1752d352f01b1b221fba054b1fcfb1c7cb100644ef2febb23f330631c66f6ff", 0x97) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:08 executing program 2: r0 = syz_io_uring_setup(0x47b4, &(0x7f0000000100)={0x0, 0xa40e, 0x400, 0xfffffffe, 0x10d}, &(0x7f0000000080), 0xfffffffffffffffd) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'security\x00', 0x0, [0x8, 0x239, 0x1, 0x8001, 0xeed]}, &(0x7f0000000380)=0x54) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0x4b49, 0x0) (async) getresuid(&(0x7f0000000040)=0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x19f1, 0xfffffffffffff4fd, 0x80, 0x81, 0x3, 0x5]}, &(0x7f0000000280)=0x78) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3, 0xee00}}, './file0\x00'}) (async) setsockopt$inet_buf(r1, 0x0, 0x31, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0, r0, r1, r0, r0, r0], 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0x89, r5, r4}, {0x9, 0x3, 0x4, 0x5, 0x0, 0x6, 0x7f0000000, 0x4}, {0x7fffffffffffffff, 0x5, 0x3, 0x100000001}, 0x8b9, 0x6e6bb6, 0x2, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4d4, 0xff}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3507, 0x0, 0x1, 0x73, 0xffffffe0, 0x1}}, 0xe8) 00:06:08 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], &(0x7f0000001600)=[0x800], 0x1}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=@bloom_filter={0x1e, 0x80, 0x0, 0x8000, 0x3010, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xb}, 0x48) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000002580)=[r1], 0x1) (async) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xa9ac, 0x0, 0x0, 0x2fa}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003d00)=[{0x1, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/91, 0x5b}], &(0x7f00000001c0)=[0x0, 0x2, 0x8, 0xb9, 0x100, 0x1]}, {0x3, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000280)=""/183, 0xb7}], &(0x7f0000000380)=[0x401]}, {0x7, 0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f0000000600)=""/176, 0xb0}, {&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f0000000740)=""/233, 0xe9}, {&(0x7f0000000840)=""/97, 0x61}], &(0x7f0000000940)=[0x0, 0xffffffffffff2b47, 0x3d9a, 0x9, 0x7, 0x6, 0xffffffffffffffff, 0x1]}, {0x0, 0x1, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)=[0x7, 0x5, 0x9, 0xffff, 0x3, 0x100000001]}, {0x6, 0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b40)=""/173, 0xad}, {&(0x7f0000000c00)=""/253, 0xfd}, {&(0x7f0000000d00)=""/20, 0x14}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/91, 0x5b}, {&(0x7f0000001dc0)=""/72, 0x48}], &(0x7f0000001ec0)=[0x1]}, {0x3, 0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001f00)=""/244, 0xf4}, {&(0x7f0000002000)=""/199, 0xc7}, {&(0x7f0000002100)=""/147, 0x93}], &(0x7f0000002200)=[0x7f, 0x2, 0x8, 0x10001]}, {0xa, 0x1, 0x0, &(0x7f00000038c0)=[{&(0x7f0000002240)=""/208, 0xd0}, {&(0x7f0000002340)=""/78, 0x4e}, {&(0x7f00000023c0)=""/137, 0x89}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/152, 0x98}, {&(0x7f0000002580)}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/252, 0xfc}, {&(0x7f00000036c0)=""/193, 0xc1}, {&(0x7f00000037c0)=""/250, 0xfa}], &(0x7f0000003980)=[0x6, 0x2, 0x8, 0xffffffff, 0x3]}, {0x2, 0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000003a80)=""/110, 0x6e}], &(0x7f0000003b40)=[0xffffffff, 0x8000000000000000]}, {0x1, 0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003b80)=""/237, 0xed}], &(0x7f0000003cc0)=[0x3]}], 0x9) (async) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 00:06:08 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 00:06:08 executing program 1: r0 = socket(0x0, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:08 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r1 = io_uring_setup(0x4704, &(0x7f0000000100)={0x0, 0xf259, 0x400, 0x2, 0x32c, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000440)={0x4, 0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f00000002c0)=""/223, 0xdf}], &(0x7f0000000400)=[0xb457, 0x20, 0x5, 0x1]}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:08 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) 00:06:08 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], &(0x7f0000001600)=[0x800], 0x1}, 0x20) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=@bloom_filter={0x1e, 0x80, 0x0, 0x8000, 0x3010, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xb}, 0x48) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000002580)=[r1], 0x1) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xa9ac, 0x0, 0x0, 0x2fa}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003d00)=[{0x1, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/91, 0x5b}], &(0x7f00000001c0)=[0x0, 0x2, 0x8, 0xb9, 0x100, 0x1]}, {0x3, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000280)=""/183, 0xb7}], &(0x7f0000000380)=[0x401]}, {0x7, 0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f0000000600)=""/176, 0xb0}, {&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f0000000740)=""/233, 0xe9}, {&(0x7f0000000840)=""/97, 0x61}], &(0x7f0000000940)=[0x0, 0xffffffffffff2b47, 0x3d9a, 0x9, 0x7, 0x6, 0xffffffffffffffff, 0x1]}, {0x0, 0x1, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)=[0x7, 0x5, 0x9, 0xffff, 0x3, 0x100000001]}, {0x6, 0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b40)=""/173, 0xad}, {&(0x7f0000000c00)=""/253, 0xfd}, {&(0x7f0000000d00)=""/20, 0x14}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/91, 0x5b}, {&(0x7f0000001dc0)=""/72, 0x48}], &(0x7f0000001ec0)=[0x1]}, {0x3, 0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001f00)=""/244, 0xf4}, {&(0x7f0000002000)=""/199, 0xc7}, {&(0x7f0000002100)=""/147, 0x93}], &(0x7f0000002200)=[0x7f, 0x2, 0x8, 0x10001]}, {0xa, 0x1, 0x0, &(0x7f00000038c0)=[{&(0x7f0000002240)=""/208, 0xd0}, {&(0x7f0000002340)=""/78, 0x4e}, {&(0x7f00000023c0)=""/137, 0x89}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/152, 0x98}, {&(0x7f0000002580)}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/252, 0xfc}, {&(0x7f00000036c0)=""/193, 0xc1}, {&(0x7f00000037c0)=""/250, 0xfa}], &(0x7f0000003980)=[0x6, 0x2, 0x8, 0xffffffff, 0x3]}, {0x2, 0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000003a80)=""/110, 0x6e}], &(0x7f0000003b40)=[0xffffffff, 0x8000000000000000]}, {0x1, 0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003b80)=""/237, 0xed}], &(0x7f0000003cc0)=[0x3]}], 0x9) (async) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 00:06:08 executing program 1: r0 = socket(0xa, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:08 executing program 2: r0 = syz_io_uring_setup(0x47b4, &(0x7f0000000100)={0x0, 0xa40e, 0x400, 0xfffffffe, 0x10d}, &(0x7f0000000080), 0xfffffffffffffffd) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'security\x00', 0x0, [0x8, 0x239, 0x1, 0x8001, 0xeed]}, &(0x7f0000000380)=0x54) (async, rerun: 32) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0x4b49, 0x0) (async, rerun: 32) getresuid(&(0x7f0000000040)=0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x0) (rerun: 32) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x19f1, 0xfffffffffffff4fd, 0x80, 0x81, 0x3, 0x5]}, &(0x7f0000000280)=0x78) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3, 0xee00}}, './file0\x00'}) (async) setsockopt$inet_buf(r1, 0x0, 0x31, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0, r0, r1, r0, r0, r0], 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0x89, r5, r4}, {0x9, 0x3, 0x4, 0x5, 0x0, 0x6, 0x7f0000000, 0x4}, {0x7fffffffffffffff, 0x5, 0x3, 0x100000001}, 0x8b9, 0x6e6bb6, 0x2, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4d4, 0xff}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3507, 0x0, 0x1, 0x73, 0xffffffe0, 0x1}}, 0xe8) 00:06:08 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r1 = io_uring_setup(0x4704, &(0x7f0000000100)={0x0, 0xf259, 0x400, 0x2, 0x32c, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000440)={0x4, 0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f00000002c0)=""/223, 0xdf}], &(0x7f0000000400)=[0xb457, 0x20, 0x5, 0x1]}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_setup(0x4704, &(0x7f0000000100)={0x0, 0xf259, 0x400, 0x2, 0x32c, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000440)={0x4, 0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f00000002c0)=""/223, 0xdf}], &(0x7f0000000400)=[0xb457, 0x20, 0x5, 0x1]}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) 00:06:08 executing program 4: r0 = syz_io_uring_setup(0x37d1, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x4}, &(0x7f0000000200)={0x0, r1+10000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x94]}, 0x8}) clock_getres(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:08 executing program 1: r0 = socket(0xa, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:08 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) r1 = io_uring_setup(0x4704, &(0x7f0000000100)={0x0, 0xf259, 0x400, 0x2, 0x32c, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000440)={0x4, 0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f00000002c0)=""/223, 0xdf}], &(0x7f0000000400)=[0xb457, 0x20, 0x5, 0x1]}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:08 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:08 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:08 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000880)=[{0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x10000, 0x0, 0x0, 0x1, 0x32c0]}, {0x6, 0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000200)=""/144, 0x90}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/84, 0x54}], &(0x7f0000000580)=[0xfffffffffffffff7]}, {0x6, 0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/26, 0x1a}, {&(0x7f00000006c0)=""/34, 0x22}, {&(0x7f0000000700)=""/101, 0x65}, {&(0x7f0000000780)=""/14, 0xe}], &(0x7f0000000840)=[0x8, 0x3, 0x2, 0xfea]}], 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x810, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:08 executing program 1: r0 = socket(0xa, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:08 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000880)=[{0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x10000, 0x0, 0x0, 0x1, 0x32c0]}, {0x6, 0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000200)=""/144, 0x90}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/84, 0x54}], &(0x7f0000000580)=[0xfffffffffffffff7]}, {0x6, 0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/26, 0x1a}, {&(0x7f00000006c0)=""/34, 0x22}, {&(0x7f0000000700)=""/101, 0x65}, {&(0x7f0000000780)=""/14, 0xe}], &(0x7f0000000840)=[0x8, 0x3, 0x2, 0xfea]}], 0x3) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x810, r0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:08 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:08 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000880)=[{0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x10000, 0x0, 0x0, 0x1, 0x32c0]}, {0x6, 0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000200)=""/144, 0x90}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/84, 0x54}], &(0x7f0000000580)=[0xfffffffffffffff7]}, {0x6, 0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/26, 0x1a}, {&(0x7f00000006c0)=""/34, 0x22}, {&(0x7f0000000700)=""/101, 0x65}, {&(0x7f0000000780)=""/14, 0xe}], &(0x7f0000000840)=[0x8, 0x3, 0x2, 0xfea]}], 0x3) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x810, r0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:08 executing program 1: socket(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r0 = syz_io_uring_setup(0x47b2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2e3}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:08 executing program 1: socket(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:08 executing program 0: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r0 = io_uring_setup(0x2822, &(0x7f0000000000)={0x0, 0x32d8, 0xc20, 0x1, 0xf7}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1e, 0x1}}, './file0\x00'}) io_uring_setup(0x652c, &(0x7f00000000c0)={0x0, 0x9e7e, 0x8, 0x1, 0x310, 0x0, r1}) r2 = io_uring_setup(0x1fde, &(0x7f0000000140)={0x0, 0x84de, 0x10, 0x2, 0x62, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x59) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 00:06:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r0 = syz_io_uring_setup(0x47b2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2e3}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) syz_io_uring_setup(0x47b2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2e3}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:08 executing program 0: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r0 = io_uring_setup(0x2822, &(0x7f0000000000)={0x0, 0x32d8, 0xc20, 0x1, 0xf7}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1e, 0x1}}, './file0\x00'}) io_uring_setup(0x652c, &(0x7f00000000c0)={0x0, 0x9e7e, 0x8, 0x1, 0x310, 0x0, r1}) (async) r2 = io_uring_setup(0x1fde, &(0x7f0000000140)={0x0, 0x84de, 0x10, 0x2, 0x62, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x59) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 00:06:08 executing program 1: socket(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:08 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000280)) 00:06:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) r0 = syz_io_uring_setup(0x47b2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2e3}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:08 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 00:06:08 executing program 0: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r0 = io_uring_setup(0x2822, &(0x7f0000000000)={0x0, 0x32d8, 0xc20, 0x1, 0xf7}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1e, 0x1}}, './file0\x00'}) io_uring_setup(0x652c, &(0x7f00000000c0)={0x0, 0x9e7e, 0x8, 0x1, 0x310, 0x0, r1}) r2 = io_uring_setup(0x1fde, &(0x7f0000000140)={0x0, 0x84de, 0x10, 0x2, 0x62, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x59) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_setup(0x2822, &(0x7f0000000000)={0x0, 0x32d8, 0xc20, 0x1, 0xf7}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1e, 0x1}}, './file0\x00'}) (async) io_uring_setup(0x652c, &(0x7f00000000c0)={0x0, 0x9e7e, 0x8, 0x1, 0x310, 0x0, r1}) (async) io_uring_setup(0x1fde, &(0x7f0000000140)={0x0, 0x84de, 0x10, 0x2, 0x62, 0x0, r1}) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x59) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) 00:06:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) bind$isdn(r0, &(0x7f0000000140)={0x22, 0x9, 0x6, 0x47, 0x44}, 0x6) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000180)={0x2, 0x2, 0x2, 0x100}) 00:06:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff63e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x557c}, &(0x7f0000000080), &(0x7f00000000c0)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 00:06:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) bind$isdn(r0, &(0x7f0000000140)={0x22, 0x9, 0x6, 0x47, 0x44}, 0x6) (async) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000001c0)) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000180)={0x2, 0x2, 0x2, 0x100}) 00:06:08 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) r1 = socket(0x2a, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000005300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fddbdf2500000000080007000900000008000100", @ANYRES32=r3, @ANYBLOB="060006004e0100001400020077673200000000000000000000000000b7f78623047d6588477e076f"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000005380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:08 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x40000000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) bind$isdn(r0, &(0x7f0000000140)={0x22, 0x9, 0x6, 0x47, 0x44}, 0x6) (async) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000001c0)) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000180)={0x2, 0x2, 0x2, 0x100}) 00:06:09 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x10010, r0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:09 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) r1 = socket(0x2a, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000005300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fddbdf2500000000080007000900000008000100", @ANYRES32=r3, @ANYBLOB="060006004e0100001400020077673200000000000000000000000000b7f78623047d6588477e076f"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000005380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:09 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x40000000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (rerun: 32) 00:06:09 executing program 4: r0 = syz_io_uring_setup(0x37d1, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x4}, &(0x7f0000000200)={0x0, r1+10000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x94]}, 0x8}) clock_getres(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000002c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:09 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) socket(0x29, 0x5, 0x0) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) (async) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) (async) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) (async) syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) (async) io_uring_setup(0x193e, &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) (async) 00:06:09 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x40000000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:09 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x10010, r0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x10010, r0, 0x0) (async) prctl$PR_GET_IO_FLUSHER(0x3a) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:09 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) r1 = socket(0x2a, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000005300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fddbdf2500000000080007000900000008000100", @ANYRES32=r3, @ANYBLOB="060006004e0100001400020077673200000000000000000000000000b7f78623047d6588477e076f"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000005380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:09 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x10010, r0, 0x0) (async) prctl$PR_GET_IO_FLUSHER(0x3a) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:09 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_io_uring_setup(0x74e, &(0x7f00000023c0), &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x43, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:09 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) r1 = socket(0x2a, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:09 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) (async) r3 = syz_io_uring_setup(0x74e, &(0x7f00000023c0), &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x43, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:09 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) r1 = socket(0x2a, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:09 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_io_uring_setup(0x74e, &(0x7f00000023c0), &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x43, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:09 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) r1 = socket(0x2a, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:09 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) r1 = socket(0x2a, 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:09 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) (async) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) (async) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) (async) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) 00:06:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) syz_io_uring_setup(0x5f88, &(0x7f0000000500)={0x0, 0xe7c9, 0x239, 0x0, 0x2af, 0x0, r0}, &(0x7f0000000580), &(0x7f0000000600)=0x0) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000, 0xb3}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x5f88, &(0x7f0000000100)={0x0, 0xb42c, 0x0, 0x3, 0x244, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000000400)=[{0x2, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000280)=""/197, 0xc5}], &(0x7f00000003c0)=[0x3ff]}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x40b0113, r2, 0x0) syz_io_uring_submit(r7, r1, &(0x7f0000000780)=@IORING_OP_STATX={0x15, 0xc, 0x0, r0, &(0x7f0000000640), &(0x7f0000000740)='./file0\x00', 0x20, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x12, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000000}, r2, 0x1, 0x0, 0x1, {0x0, r6}}) 00:06:09 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x10001, 0x1) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000040)) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = syz_io_uring_setup(0x47b8, &(0x7f0000000140)={0x0, 0x591a, 0x20, 0x3, 0x326}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:09 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) r1 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:09 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x10001, 0x1) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) (async) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000040)) (async) ioctl$RTC_UIE_OFF(r0, 0x7004) (async) r1 = syz_io_uring_setup(0x47b8, &(0x7f0000000140)={0x0, 0x591a, 0x20, 0x3, 0x326}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) syz_io_uring_setup(0x5f88, &(0x7f0000000500)={0x0, 0xe7c9, 0x239, 0x0, 0x2af, 0x0, r0}, &(0x7f0000000580), &(0x7f0000000600)) (async) syz_io_uring_setup(0x5f88, &(0x7f0000000500)={0x0, 0xe7c9, 0x239, 0x0, 0x2af, 0x0, r0}, &(0x7f0000000580), &(0x7f0000000600)=0x0) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000, 0xb3}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x5f88, &(0x7f0000000100)={0x0, 0xb42c, 0x0, 0x3, 0x244, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000000400)=[{0x2, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000280)=""/197, 0xc5}], &(0x7f00000003c0)=[0x3ff]}], 0x1) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000000400)=[{0x2, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000280)=""/197, 0xc5}], &(0x7f00000003c0)=[0x3ff]}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x40b0113, r2, 0x0) syz_io_uring_submit(r7, r1, &(0x7f0000000780)=@IORING_OP_STATX={0x15, 0xc, 0x0, r0, &(0x7f0000000640), &(0x7f0000000740)='./file0\x00', 0x20, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x12, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000000}, r2, 0x1, 0x0, 0x1, {0x0, r6}}) 00:06:09 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:09 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x10001, 0x1) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000040)) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = syz_io_uring_setup(0x47b8, &(0x7f0000000140)={0x0, 0x591a, 0x20, 0x3, 0x326}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_open_dev$rtc(&(0x7f0000000000), 0x10001, 0x1) (async) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) (async) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000040)) (async) ioctl$RTC_UIE_OFF(r0, 0x7004) (async) syz_io_uring_setup(0x47b8, &(0x7f0000000140)={0x0, 0x591a, 0x20, 0x3, 0x326}, &(0x7f0000000100), &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) syz_io_uring_setup(0x5f88, &(0x7f0000000500)={0x0, 0xe7c9, 0x239, 0x0, 0x2af, 0x0, r0}, &(0x7f0000000580), &(0x7f0000000600)=0x0) (async) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000, 0xb3}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x5f88, &(0x7f0000000100)={0x0, 0xb42c, 0x0, 0x3, 0x244, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000000400)=[{0x2, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000280)=""/197, 0xc5}], &(0x7f00000003c0)=[0x3ff]}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x40b0113, r2, 0x0) syz_io_uring_submit(r7, r1, &(0x7f0000000780)=@IORING_OP_STATX={0x15, 0xc, 0x0, r0, &(0x7f0000000640), &(0x7f0000000740)='./file0\x00', 0x20, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x12, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000000}, r2, 0x1, 0x0, 0x1, {0x0, r6}}) 00:06:09 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x1f, 0x23cf], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:09 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x50c0, &(0x7f0000000100)={0x0, 0x4b93, 0x400, 0x1, 0xa1, 0x0, r0}) io_uring_setup(0x5628, &(0x7f0000000180)={0x0, 0x34f6, 0x8, 0x0, 0x3df, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r2]) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc015}, 0x11) 00:06:09 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:09 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000040)="06fd6688b62ada65f689ffba0544", 0xe, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890c, &(0x7f0000000000)={'wg1\x00'}) r1 = syz_io_uring_setup(0x47bb, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:09 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x1f, 0x23cf], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:09 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005240)=[{0x9, 0x1, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/21, 0x15}], &(0x7f00000026c0)=[0x800, 0x23f5, 0x4, 0x8, 0xa6, 0x6]}, {0x9, 0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f00000027c0)=""/132, 0x84}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/10, 0xa}, {&(0x7f00000029c0)=""/71, 0x47}, {&(0x7f0000002a40)=""/242, 0xf2}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/36, 0x24}], &(0x7f0000002dc0)=[0x0, 0x3, 0x1000000000000000, 0x0, 0x7fffffffffffffff]}, {0x1, 0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/227, 0xe3}], &(0x7f0000002f40)=[0x100]}, {0x1, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/102, 0x66}], &(0x7f0000003040)=[0x7, 0xfffffffffffff000]}, {0x5, 0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003080)=""/5, 0x5}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/36, 0x24}, {&(0x7f0000004180)=""/4096, 0x1000}], &(0x7f0000005200)=[0x10a800000000, 0x7fff]}], 0x5) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:09 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x1f, 0x23cf], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x1f, 0x23cf], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) 00:06:09 executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000040)="06fd6688b62ada65f689ffba0544", 0xe, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890c, &(0x7f0000000000)={'wg1\x00'}) r1 = syz_io_uring_setup(0x47bb, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) [ 1836.608769][ T4300] autofs4:pid:4300:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) 00:06:10 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000040)="06fd6688b62ada65f689ffba0544", 0xe, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890c, &(0x7f0000000000)={'wg1\x00'}) r1 = syz_io_uring_setup(0x47bb, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:10 executing program 4: r0 = syz_io_uring_setup(0x37d1, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x4}, &(0x7f0000000200)={0x0, r1+10000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x94]}, 0x8}) (async) clock_getres(0x0, &(0x7f0000000180)) (async) clock_gettime(0x0, &(0x7f00000002c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:10 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x50c0, &(0x7f0000000100)={0x0, 0x4b93, 0x400, 0x1, 0xa1, 0x0, r0}) io_uring_setup(0x5628, &(0x7f0000000180)={0x0, 0x34f6, 0x8, 0x0, 0x3df, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r2]) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc015}, 0x11) 00:06:10 executing program 3: r0 = syz_io_uring_setup(0x4495, &(0x7f0000000000)={0x0, 0x0, 0x80}, &(0x7f0000000080), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:10 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 3: r0 = syz_io_uring_setup(0x4495, &(0x7f0000000000)={0x0, 0x0, 0x80}, &(0x7f0000000080), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:10 executing program 3: r0 = syz_io_uring_setup(0x4495, &(0x7f0000000000)={0x0, 0x0, 0x80}, &(0x7f0000000080), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:10 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_WRITEV={0x2, 0x50, 0x6000, @fd_index=0x4, 0x5, &(0x7f0000000600)=[{&(0x7f0000000140)="bf6445e00c0b36fe7c0c58bf11458601a83a491e89b3e46d290f2d4014cdc77a08f856649684d58a3fc90db3ae24b803d663be0774c4cea682d89a2a004cef2fe1aa24e4e8585f5aaabcb9cca18fa2e188b96b7db082162cce0f2d5446f6c8ac5bc3d651bb5112f6a8d263aca859bd0e24acd81c913abcdce8ef22a7f8e928446a6a73ca6a4b9a6245a076285169d8b56e72ec61fd", 0x95}, {&(0x7f0000000200)="64aadb83bf31c6819536923d54e71399f40544a7d1dd3dca2a7ad6aea9243c61de52aa54893d3d6f156315fa04acea402a5fd53b9062f038e60c81fbb1d3ea1b44b6341c159db2984aa0a492c753a8640d27935401cc16db4cef10b29f7c552336d947544c82c7c47ec34ef7aa8a28887e62c5a8eaf5d47394b3b8bee823f0959a44abd4aadefdd50433ac4c137f9276c89d9ef128c0a25cc711972d4c7b6cd3719b4edf228817acde99f7c74369369c2dd6ecddbe7f2e1880b0b4afa32d15f318d30923", 0xc4}, {&(0x7f0000000300)="536d50a7925a2ddc14b98029d02372fef15bca47a5b3784afd4dbb8c436360256f8777979261a07b09", 0x29}, {&(0x7f0000000340)="af184b9fa5cb58a3c1dadbab70faeafa475b7bed709b290b70af716e2c9c846c211c2077bc69544345c85325b0195ff602e3bae2f1b6d06e2338edb9e849f73b0b42b9de19b60eddb1adc3a5eb0ca1b89bf1aee7d1b1852ef6c9912bc75c090b0afacc5636b98d009e273564c38fbc2a932087ca7a94f8f04427417949584c092535279d2b031f6ec9d1f4d38a2a1fed426b890766", 0x95}, {&(0x7f0000000400)="89c5736527d57659485778dcfe6480c3b3d7e51ee73765b755d7bdb194bdb4dcdb055b45dd45aa90db70da3873353b808e325a0e1be9d51c4960c415ee7cc591c0bad92c920070931a69e530d18eb76f30453f9b0623e7c03d9debec07e9b22fdd2a89038ac65b6f3b681b63fbd3457e0b573047fde1793a96fc077b8150f03c8b1a393556", 0x85}, {&(0x7f00000004c0)="9cd6fe5d752906a6bcf3c69d3c3ccad9b318e5ccd38040a6fe96db4ace827d0b9f5ca1c8079d8eed005ef5caa1d76b9e34f56afd49842ad947fd4725ea8b83ca0a05ca6356439de62bed8c559071388cca3cc04dec6d4ccb54863bcf58c9d364fb715d51f4f56aa79a6863a3579b02a193627397b28e18197375bc34feeaff5b7ea45cc1ee7388d6365cb08faade09936fe60911279f09128b0780492b0ecbb9b821ed98fd83cd677c575a7e7bb68dfedd5d389fb636", 0xb6}], 0x6, 0x3f, 0x1, {0x3, r3}}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x2, 0x9b83, 0x0, 0x8}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x110, r0, 0x0) r5 = syz_io_uring_setup(0x1ec2, &(0x7f0000000680)={0x0, 0x1a18, 0x1, 0x3, 0x51, 0x0, r0}, &(0x7f0000000700), &(0x7f0000000740)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) ioctl$RTC_WIE_ON(r7, 0x700f) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000780)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd_index=0x4, 0x40, 0x0, 0x30ae, 0x0, 0x1, {0x0, r8}}) 00:06:10 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x50c0, &(0x7f0000000100)={0x0, 0x4b93, 0x400, 0x1, 0xa1, 0x0, r0}) io_uring_setup(0x5628, &(0x7f0000000180)={0x0, 0x34f6, 0x8, 0x0, 0x3df, 0x0, r1}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r2]) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc015}, 0x11) 00:06:10 executing program 3: r0 = syz_io_uring_setup(0x2e5d, &(0x7f0000000200)={0x0, 0xf119, 0x15b2d9cfb46ea661, 0x2, 0xa8}, &(0x7f0000000280), &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x58, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4008048) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000680)={0x0, 0x0, 0x80, 0x0, 0x4, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000001c0)=0xfff) sendmsg$802154_dgram(r3, &(0x7f0000000180)={&(0x7f0000000000), 0x14, &(0x7f0000000140)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="2e0000696c653000b9874c9d25b024622a1c6b047d0badd16e5c883b8f8e02c07ae3564222f6821a7e71131ec3f45b69ff085582fe4a2bac4bc591375628f9ec00000000000000fc58413425467cf35b5c"]) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000440)=[{{0x4, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3}, {0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x38) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000180)={0xffff8001, 0x0, &(0x7f0000000140)=[r3]}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 00:06:10 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 1836.897713][ T4330] autofs4:pid:4330:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) 00:06:10 executing program 1: r0 = socket(0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 4: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_WRITEV={0x2, 0x50, 0x6000, @fd_index=0x4, 0x5, &(0x7f0000000600)=[{&(0x7f0000000140)="bf6445e00c0b36fe7c0c58bf11458601a83a491e89b3e46d290f2d4014cdc77a08f856649684d58a3fc90db3ae24b803d663be0774c4cea682d89a2a004cef2fe1aa24e4e8585f5aaabcb9cca18fa2e188b96b7db082162cce0f2d5446f6c8ac5bc3d651bb5112f6a8d263aca859bd0e24acd81c913abcdce8ef22a7f8e928446a6a73ca6a4b9a6245a076285169d8b56e72ec61fd", 0x95}, {&(0x7f0000000200)="64aadb83bf31c6819536923d54e71399f40544a7d1dd3dca2a7ad6aea9243c61de52aa54893d3d6f156315fa04acea402a5fd53b9062f038e60c81fbb1d3ea1b44b6341c159db2984aa0a492c753a8640d27935401cc16db4cef10b29f7c552336d947544c82c7c47ec34ef7aa8a28887e62c5a8eaf5d47394b3b8bee823f0959a44abd4aadefdd50433ac4c137f9276c89d9ef128c0a25cc711972d4c7b6cd3719b4edf228817acde99f7c74369369c2dd6ecddbe7f2e1880b0b4afa32d15f318d30923", 0xc4}, {&(0x7f0000000300)="536d50a7925a2ddc14b98029d02372fef15bca47a5b3784afd4dbb8c436360256f8777979261a07b09", 0x29}, {&(0x7f0000000340)="af184b9fa5cb58a3c1dadbab70faeafa475b7bed709b290b70af716e2c9c846c211c2077bc69544345c85325b0195ff602e3bae2f1b6d06e2338edb9e849f73b0b42b9de19b60eddb1adc3a5eb0ca1b89bf1aee7d1b1852ef6c9912bc75c090b0afacc5636b98d009e273564c38fbc2a932087ca7a94f8f04427417949584c092535279d2b031f6ec9d1f4d38a2a1fed426b890766", 0x95}, {&(0x7f0000000400)="89c5736527d57659485778dcfe6480c3b3d7e51ee73765b755d7bdb194bdb4dcdb055b45dd45aa90db70da3873353b808e325a0e1be9d51c4960c415ee7cc591c0bad92c920070931a69e530d18eb76f30453f9b0623e7c03d9debec07e9b22fdd2a89038ac65b6f3b681b63fbd3457e0b573047fde1793a96fc077b8150f03c8b1a393556", 0x85}, {&(0x7f00000004c0)="9cd6fe5d752906a6bcf3c69d3c3ccad9b318e5ccd38040a6fe96db4ace827d0b9f5ca1c8079d8eed005ef5caa1d76b9e34f56afd49842ad947fd4725ea8b83ca0a05ca6356439de62bed8c559071388cca3cc04dec6d4ccb54863bcf58c9d364fb715d51f4f56aa79a6863a3579b02a193627397b28e18197375bc34feeaff5b7ea45cc1ee7388d6365cb08faade09936fe60911279f09128b0780492b0ecbb9b821ed98fd83cd677c575a7e7bb68dfedd5d389fb636", 0xb6}], 0x6, 0x3f, 0x1, {0x3, r3}}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_WRITEV={0x2, 0x50, 0x6000, @fd_index=0x4, 0x5, &(0x7f0000000600)=[{&(0x7f0000000140)="bf6445e00c0b36fe7c0c58bf11458601a83a491e89b3e46d290f2d4014cdc77a08f856649684d58a3fc90db3ae24b803d663be0774c4cea682d89a2a004cef2fe1aa24e4e8585f5aaabcb9cca18fa2e188b96b7db082162cce0f2d5446f6c8ac5bc3d651bb5112f6a8d263aca859bd0e24acd81c913abcdce8ef22a7f8e928446a6a73ca6a4b9a6245a076285169d8b56e72ec61fd", 0x95}, {&(0x7f0000000200)="64aadb83bf31c6819536923d54e71399f40544a7d1dd3dca2a7ad6aea9243c61de52aa54893d3d6f156315fa04acea402a5fd53b9062f038e60c81fbb1d3ea1b44b6341c159db2984aa0a492c753a8640d27935401cc16db4cef10b29f7c552336d947544c82c7c47ec34ef7aa8a28887e62c5a8eaf5d47394b3b8bee823f0959a44abd4aadefdd50433ac4c137f9276c89d9ef128c0a25cc711972d4c7b6cd3719b4edf228817acde99f7c74369369c2dd6ecddbe7f2e1880b0b4afa32d15f318d30923", 0xc4}, {&(0x7f0000000300)="536d50a7925a2ddc14b98029d02372fef15bca47a5b3784afd4dbb8c436360256f8777979261a07b09", 0x29}, {&(0x7f0000000340)="af184b9fa5cb58a3c1dadbab70faeafa475b7bed709b290b70af716e2c9c846c211c2077bc69544345c85325b0195ff602e3bae2f1b6d06e2338edb9e849f73b0b42b9de19b60eddb1adc3a5eb0ca1b89bf1aee7d1b1852ef6c9912bc75c090b0afacc5636b98d009e273564c38fbc2a932087ca7a94f8f04427417949584c092535279d2b031f6ec9d1f4d38a2a1fed426b890766", 0x95}, {&(0x7f0000000400)="89c5736527d57659485778dcfe6480c3b3d7e51ee73765b755d7bdb194bdb4dcdb055b45dd45aa90db70da3873353b808e325a0e1be9d51c4960c415ee7cc591c0bad92c920070931a69e530d18eb76f30453f9b0623e7c03d9debec07e9b22fdd2a89038ac65b6f3b681b63fbd3457e0b573047fde1793a96fc077b8150f03c8b1a393556", 0x85}, {&(0x7f00000004c0)="9cd6fe5d752906a6bcf3c69d3c3ccad9b318e5ccd38040a6fe96db4ace827d0b9f5ca1c8079d8eed005ef5caa1d76b9e34f56afd49842ad947fd4725ea8b83ca0a05ca6356439de62bed8c559071388cca3cc04dec6d4ccb54863bcf58c9d364fb715d51f4f56aa79a6863a3579b02a193627397b28e18197375bc34feeaff5b7ea45cc1ee7388d6365cb08faade09936fe60911279f09128b0780492b0ecbb9b821ed98fd83cd677c575a7e7bb68dfedd5d389fb636", 0xb6}], 0x6, 0x3f, 0x1, {0x3, r3}}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x2, 0x9b83, 0x0, 0x8}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x110, r0, 0x0) syz_io_uring_setup(0x1ec2, &(0x7f0000000680)={0x0, 0x1a18, 0x1, 0x3, 0x51, 0x0, r0}, &(0x7f0000000700), &(0x7f0000000740)) (async) r5 = syz_io_uring_setup(0x1ec2, &(0x7f0000000680)={0x0, 0x1a18, 0x1, 0x3, 0x51, 0x0, r0}, &(0x7f0000000700), &(0x7f0000000740)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) ioctl$RTC_WIE_ON(r7, 0x700f) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000780)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd_index=0x4, 0x40, 0x0, 0x30ae, 0x0, 0x1, {0x0, r8}}) 00:06:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xbe}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xa98e, 0x0, 0xfffffffe}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:10 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:10 executing program 1: r0 = socket(0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 3: r0 = syz_io_uring_setup(0x2e5d, &(0x7f0000000200)={0x0, 0xf119, 0x15b2d9cfb46ea661, 0x2, 0xa8}, &(0x7f0000000280), &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x58, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4008048) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000680)={0x0, 0x0, 0x80, 0x0, 0x4, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000001c0)=0xfff) sendmsg$802154_dgram(r3, &(0x7f0000000180)={&(0x7f0000000000), 0x14, &(0x7f0000000140)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="2e0000696c653000b9874c9d25b024622a1c6b047d0badd16e5c883b8f8e02c07ae3564222f6821a7e71131ec3f45b69ff085582fe4a2bac4bc591375628f9ec00000000000000fc58413425467cf35b5c"]) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="2e0000696c653000b9874c9d25b024622a1c6b047d0badd16e5c883b8f8e02c07ae3564222f6821a7e71131ec3f45b69ff085582fe4a2bac4bc591375628f9ec00000000000000fc58413425467cf35b5c"]) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000440)=[{{0x4, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3}, {0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x38) (async) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000440)=[{{0x4, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3}, {0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x38) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000180)={0xffff8001, 0x0, &(0x7f0000000140)=[r3]}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 00:06:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xbe}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xbe}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xa98e, 0x0, 0xfffffffe}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:10 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:10 executing program 3: r0 = syz_io_uring_setup(0x2e5d, &(0x7f0000000200)={0x0, 0xf119, 0x15b2d9cfb46ea661, 0x2, 0xa8}, &(0x7f0000000280), &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x58, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4008048) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000680)={0x0, 0x0, 0x80, 0x0, 0x4, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000001c0)=0xfff) sendmsg$802154_dgram(r3, &(0x7f0000000180)={&(0x7f0000000000), 0x14, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$802154_dgram(r3, &(0x7f0000000180)={&(0x7f0000000000), 0x14, &(0x7f0000000140)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="2e0000696c653000b9874c9d25b024622a1c6b047d0badd16e5c883b8f8e02c07ae3564222f6821a7e71131ec3f45b69ff085582fe4a2bac4bc591375628f9ec00000000000000fc58413425467cf35b5c"]) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000440)=[{{0x4, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3}, {0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x38) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000180)={0xffff8001, 0x0, &(0x7f0000000140)=[r3]}, 0x1) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000180)={0xffff8001, 0x0, &(0x7f0000000140)=[r3]}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 00:06:10 executing program 4: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_WRITEV={0x2, 0x50, 0x6000, @fd_index=0x4, 0x5, &(0x7f0000000600)=[{&(0x7f0000000140)="bf6445e00c0b36fe7c0c58bf11458601a83a491e89b3e46d290f2d4014cdc77a08f856649684d58a3fc90db3ae24b803d663be0774c4cea682d89a2a004cef2fe1aa24e4e8585f5aaabcb9cca18fa2e188b96b7db082162cce0f2d5446f6c8ac5bc3d651bb5112f6a8d263aca859bd0e24acd81c913abcdce8ef22a7f8e928446a6a73ca6a4b9a6245a076285169d8b56e72ec61fd", 0x95}, {&(0x7f0000000200)="64aadb83bf31c6819536923d54e71399f40544a7d1dd3dca2a7ad6aea9243c61de52aa54893d3d6f156315fa04acea402a5fd53b9062f038e60c81fbb1d3ea1b44b6341c159db2984aa0a492c753a8640d27935401cc16db4cef10b29f7c552336d947544c82c7c47ec34ef7aa8a28887e62c5a8eaf5d47394b3b8bee823f0959a44abd4aadefdd50433ac4c137f9276c89d9ef128c0a25cc711972d4c7b6cd3719b4edf228817acde99f7c74369369c2dd6ecddbe7f2e1880b0b4afa32d15f318d30923", 0xc4}, {&(0x7f0000000300)="536d50a7925a2ddc14b98029d02372fef15bca47a5b3784afd4dbb8c436360256f8777979261a07b09", 0x29}, {&(0x7f0000000340)="af184b9fa5cb58a3c1dadbab70faeafa475b7bed709b290b70af716e2c9c846c211c2077bc69544345c85325b0195ff602e3bae2f1b6d06e2338edb9e849f73b0b42b9de19b60eddb1adc3a5eb0ca1b89bf1aee7d1b1852ef6c9912bc75c090b0afacc5636b98d009e273564c38fbc2a932087ca7a94f8f04427417949584c092535279d2b031f6ec9d1f4d38a2a1fed426b890766", 0x95}, {&(0x7f0000000400)="89c5736527d57659485778dcfe6480c3b3d7e51ee73765b755d7bdb194bdb4dcdb055b45dd45aa90db70da3873353b808e325a0e1be9d51c4960c415ee7cc591c0bad92c920070931a69e530d18eb76f30453f9b0623e7c03d9debec07e9b22fdd2a89038ac65b6f3b681b63fbd3457e0b573047fde1793a96fc077b8150f03c8b1a393556", 0x85}, {&(0x7f00000004c0)="9cd6fe5d752906a6bcf3c69d3c3ccad9b318e5ccd38040a6fe96db4ace827d0b9f5ca1c8079d8eed005ef5caa1d76b9e34f56afd49842ad947fd4725ea8b83ca0a05ca6356439de62bed8c559071388cca3cc04dec6d4ccb54863bcf58c9d364fb715d51f4f56aa79a6863a3579b02a193627397b28e18197375bc34feeaff5b7ea45cc1ee7388d6365cb08faade09936fe60911279f09128b0780492b0ecbb9b821ed98fd83cd677c575a7e7bb68dfedd5d389fb636", 0xb6}], 0x6, 0x3f, 0x1, {0x3, r3}}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_WRITEV={0x2, 0x50, 0x6000, @fd_index=0x4, 0x5, &(0x7f0000000600)=[{&(0x7f0000000140)="bf6445e00c0b36fe7c0c58bf11458601a83a491e89b3e46d290f2d4014cdc77a08f856649684d58a3fc90db3ae24b803d663be0774c4cea682d89a2a004cef2fe1aa24e4e8585f5aaabcb9cca18fa2e188b96b7db082162cce0f2d5446f6c8ac5bc3d651bb5112f6a8d263aca859bd0e24acd81c913abcdce8ef22a7f8e928446a6a73ca6a4b9a6245a076285169d8b56e72ec61fd", 0x95}, {&(0x7f0000000200)="64aadb83bf31c6819536923d54e71399f40544a7d1dd3dca2a7ad6aea9243c61de52aa54893d3d6f156315fa04acea402a5fd53b9062f038e60c81fbb1d3ea1b44b6341c159db2984aa0a492c753a8640d27935401cc16db4cef10b29f7c552336d947544c82c7c47ec34ef7aa8a28887e62c5a8eaf5d47394b3b8bee823f0959a44abd4aadefdd50433ac4c137f9276c89d9ef128c0a25cc711972d4c7b6cd3719b4edf228817acde99f7c74369369c2dd6ecddbe7f2e1880b0b4afa32d15f318d30923", 0xc4}, {&(0x7f0000000300)="536d50a7925a2ddc14b98029d02372fef15bca47a5b3784afd4dbb8c436360256f8777979261a07b09", 0x29}, {&(0x7f0000000340)="af184b9fa5cb58a3c1dadbab70faeafa475b7bed709b290b70af716e2c9c846c211c2077bc69544345c85325b0195ff602e3bae2f1b6d06e2338edb9e849f73b0b42b9de19b60eddb1adc3a5eb0ca1b89bf1aee7d1b1852ef6c9912bc75c090b0afacc5636b98d009e273564c38fbc2a932087ca7a94f8f04427417949584c092535279d2b031f6ec9d1f4d38a2a1fed426b890766", 0x95}, {&(0x7f0000000400)="89c5736527d57659485778dcfe6480c3b3d7e51ee73765b755d7bdb194bdb4dcdb055b45dd45aa90db70da3873353b808e325a0e1be9d51c4960c415ee7cc591c0bad92c920070931a69e530d18eb76f30453f9b0623e7c03d9debec07e9b22fdd2a89038ac65b6f3b681b63fbd3457e0b573047fde1793a96fc077b8150f03c8b1a393556", 0x85}, {&(0x7f00000004c0)="9cd6fe5d752906a6bcf3c69d3c3ccad9b318e5ccd38040a6fe96db4ace827d0b9f5ca1c8079d8eed005ef5caa1d76b9e34f56afd49842ad947fd4725ea8b83ca0a05ca6356439de62bed8c559071388cca3cc04dec6d4ccb54863bcf58c9d364fb715d51f4f56aa79a6863a3579b02a193627397b28e18197375bc34feeaff5b7ea45cc1ee7388d6365cb08faade09936fe60911279f09128b0780492b0ecbb9b821ed98fd83cd677c575a7e7bb68dfedd5d389fb636", 0xb6}], 0x6, 0x3f, 0x1, {0x3, r3}}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x2, 0x9b83, 0x0, 0x8}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x110, r0, 0x0) r5 = syz_io_uring_setup(0x1ec2, &(0x7f0000000680)={0x0, 0x1a18, 0x1, 0x3, 0x51, 0x0, r0}, &(0x7f0000000700), &(0x7f0000000740)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) ioctl$RTC_WIE_ON(r7, 0x700f) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000780)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd_index=0x4, 0x40, 0x0, 0x30ae, 0x0, 0x1, {0x0, r8}}) 00:06:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xbe}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xa98e, 0x0, 0xfffffffe}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:10 executing program 1: r0 = socket(0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000007c0)={0x7, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f00000006c0)=""/140, 0x8c}], &(0x7f0000000780)=[0x3, 0x5, 0xfffffffffffffff0], 0x4}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r1 = io_uring_setup(0x1e72, &(0x7f00000001c0)={0x0, 0x5619, 0x800, 0x2, 0x1f7}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000004c0)={0x4, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000400)=""/88, 0x58}], &(0x7f0000000480)=[0x1, 0x7, 0x2, 0x4, 0x1]}, 0x20) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_op={0x1, 0x16}, @ioring_restriction_sqe_op={0x1, 0xc}, @ioring_restriction_sqe_op={0x1, 0x9}], 0x3) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:10 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) 00:06:10 executing program 1: r0 = socket(0x2a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000100)) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x5, 0x40000) ioctl$RTC_AIE_ON(r1, 0x7001) 00:06:10 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xffff0001, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@local, @loopback, 0x0}, &(0x7f00000003c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pi6 \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000002700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYBLOB="000000001a0000002e2f66616c653000"]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x10, r11, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r15) getsockopt$IPT_SO_GET_REVISION_MATCH(r15, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) sendmsg$WG_CMD_GET_DEVICE(r15, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r16, 0x300, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r14, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r13, r15, 0x0, 0x0, 0x4}, 0x48) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x73, &(0x7f0000000300)=""/115, 0x0, 0x2, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xf, 0x1, 0x46}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[r5, r6, r7, r8, r10, r11, r12, r15, r17, r18], &(0x7f0000000900)=[{0x3, 0x5, 0x4, 0x7}, {0x3, 0x1, 0xc, 0xb}, {0x0, 0x2, 0x10, 0xb}, {0x3, 0x3, 0x2, 0x9}, {0x4, 0x1, 0x9, 0xc}, {0x3, 0x1, 0xb, 0xb}], 0x10, 0x8}, 0x90) 00:06:10 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000007c0)={0x7, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f00000006c0)=""/140, 0x8c}], &(0x7f0000000780)=[0x3, 0x5, 0xfffffffffffffff0], 0x4}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) r1 = io_uring_setup(0x1e72, &(0x7f00000001c0)={0x0, 0x5619, 0x800, 0x2, 0x1f7}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000004c0)={0x4, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000400)=""/88, 0x58}], &(0x7f0000000480)=[0x1, 0x7, 0x2, 0x4, 0x1]}, 0x20) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_op={0x1, 0x16}, @ioring_restriction_sqe_op={0x1, 0xc}, @ioring_restriction_sqe_op={0x1, 0x9}], 0x3) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:10 executing program 1: r0 = socket(0x2a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000100)) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x5, 0x40000) ioctl$RTC_AIE_ON(r1, 0x7001) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000100)) (async) syz_open_dev$rtc(&(0x7f0000000140), 0x5, 0x40000) (async) ioctl$RTC_AIE_ON(r1, 0x7001) (async) 00:06:10 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xffff0001, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 64) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@local, @loopback, 0x0}, &(0x7f00000003c0)=0xc) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pi6 \x00'}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000002700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYBLOB="000000001a0000002e2f66616c653000"]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) (async) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x10, r11, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) (async, rerun: 32) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) (rerun: 32) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r15) (async, rerun: 32) getsockopt$IPT_SO_GET_REVISION_MATCH(r15, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) (rerun: 32) sendmsg$WG_CMD_GET_DEVICE(r15, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r16, 0x300, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r14, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r13, r15, 0x0, 0x0, 0x4}, 0x48) (async) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x73, &(0x7f0000000300)=""/115, 0x0, 0x2, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xf, 0x1, 0x46}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[r5, r6, r7, r8, r10, r11, r12, r15, r17, r18], &(0x7f0000000900)=[{0x3, 0x5, 0x4, 0x7}, {0x3, 0x1, 0xc, 0xb}, {0x0, 0x2, 0x10, 0xb}, {0x3, 0x3, 0x2, 0x9}, {0x4, 0x1, 0x9, 0xc}, {0x3, 0x1, 0xb, 0xb}], 0x10, 0x8}, 0x90) 00:06:10 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000007c0)={0x7, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f00000006c0)=""/140, 0x8c}], &(0x7f0000000780)=[0x3, 0x5, 0xfffffffffffffff0], 0x4}, 0x20) (rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) r1 = io_uring_setup(0x1e72, &(0x7f00000001c0)={0x0, 0x5619, 0x800, 0x2, 0x1f7}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000004c0)={0x4, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000400)=""/88, 0x58}], &(0x7f0000000480)=[0x1, 0x7, 0x2, 0x4, 0x1]}, 0x20) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_op={0x1, 0x16}, @ioring_restriction_sqe_op={0x1, 0xc}, @ioring_restriction_sqe_op={0x1, 0x9}], 0x3) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (rerun: 32) 00:06:10 executing program 1: r0 = socket(0x2a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 1: socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async, rerun: 32) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000100)) (async, rerun: 32) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x5, 0x40000) ioctl$RTC_AIE_ON(r1, 0x7001) 00:06:10 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xffff0001, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@local, @loopback}, &(0x7f00000003c0)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@local, @loopback, 0x0}, &(0x7f00000003c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pi6 \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000002700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYBLOB="000000001a0000002e2f66616c653000"]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x10, r11, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) (async) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r15) getsockopt$IPT_SO_GET_REVISION_MATCH(r15, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) sendmsg$WG_CMD_GET_DEVICE(r15, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r16, 0x300, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r15, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r16, 0x300, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r14, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r13, r15, 0x0, 0x0, 0x4}, 0x48) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x73, &(0x7f0000000300)=""/115, 0x0, 0x2, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xf, 0x1, 0x46}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[r5, r6, r7, r8, r10, r11, r12, r15, r17, r18], &(0x7f0000000900)=[{0x3, 0x5, 0x4, 0x7}, {0x3, 0x1, 0xc, 0xb}, {0x0, 0x2, 0x10, 0xb}, {0x3, 0x3, 0x2, 0x9}, {0x4, 0x1, 0x9, 0xc}, {0x3, 0x1, 0xb, 0xb}], 0x10, 0x8}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x73, &(0x7f0000000300)=""/115, 0x0, 0x2, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xf, 0x1, 0x46}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[r5, r6, r7, r8, r10, r11, r12, r15, r17, r18], &(0x7f0000000900)=[{0x3, 0x5, 0x4, 0x7}, {0x3, 0x1, 0xc, 0xb}, {0x0, 0x2, 0x10, 0xb}, {0x3, 0x3, 0x2, 0x9}, {0x4, 0x1, 0x9, 0xc}, {0x3, 0x1, 0xb, 0xb}], 0x10, 0x8}, 0x90) 00:06:10 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000700)=r1, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000002c80)={0x9, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000800)=""/56, 0x38}, {&(0x7f0000000840)=""/106, 0x6a}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/130, 0x82}, {&(0x7f0000001980)=""/45, 0x2d}, {&(0x7f00000019c0)=""/4, 0x4}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/4096, 0x1000}], &(0x7f0000002c40)=[0xffffffff, 0x3f, 0x7], 0x9}, 0x20) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000740)=[@ioring_restriction_sqe_op={0x1, 0x18}, @ioring_restriction_sqe_flags_required={0x3, 0x7}, @ioring_restriction_sqe_flags_required], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000006c0)={0x7, 0x1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f0000000200)=""/96, 0x60}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f00000002c0)=""/117, 0x75}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f00000004c0)=""/253, 0xfd}], &(0x7f0000000680)=[0x4, 0x800, 0x6]}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x400801, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 00:06:10 executing program 1: socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000700)=r1, 0x1) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000002c80)={0x9, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000800)=""/56, 0x38}, {&(0x7f0000000840)=""/106, 0x6a}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/130, 0x82}, {&(0x7f0000001980)=""/45, 0x2d}, {&(0x7f00000019c0)=""/4, 0x4}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/4096, 0x1000}], &(0x7f0000002c40)=[0xffffffff, 0x3f, 0x7], 0x9}, 0x20) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000740)=[@ioring_restriction_sqe_op={0x1, 0x18}, @ioring_restriction_sqe_flags_required={0x3, 0x7}, @ioring_restriction_sqe_flags_required], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000006c0)={0x7, 0x1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f0000000200)=""/96, 0x60}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f00000002c0)=""/117, 0x75}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f00000004c0)=""/253, 0xfd}], &(0x7f0000000680)=[0x4, 0x800, 0x6]}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x400801, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 00:06:10 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:10 executing program 1: socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 00:06:10 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x2102) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)}, 0x0) recvmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000100)=""/3, 0x3}], 0x3}, 0x40012040) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 00:06:10 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 00:06:10 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) (async) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) 00:06:10 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x2102) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)}, 0x0) recvmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000100)=""/3, 0x3}], 0x3}, 0x40012040) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x2102) (async) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)}, 0x0) (async) recvmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000100)=""/3, 0x3}], 0x3}, 0x40012040) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) 00:06:10 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) eventfd(0x0) (async) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000700)=r1, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000002c80)={0x9, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000800)=""/56, 0x38}, {&(0x7f0000000840)=""/106, 0x6a}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/130, 0x82}, {&(0x7f0000001980)=""/45, 0x2d}, {&(0x7f00000019c0)=""/4, 0x4}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/4096, 0x1000}], &(0x7f0000002c40)=[0xffffffff, 0x3f, 0x7], 0x9}, 0x20) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000740)=[@ioring_restriction_sqe_op={0x1, 0x18}, @ioring_restriction_sqe_flags_required={0x3, 0x7}, @ioring_restriction_sqe_flags_required], 0x3) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000740)=[@ioring_restriction_sqe_op={0x1, 0x18}, @ioring_restriction_sqe_flags_required={0x3, 0x7}, @ioring_restriction_sqe_flags_required], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000006c0)={0x7, 0x1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f0000000200)=""/96, 0x60}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f00000002c0)=""/117, 0x75}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f00000004c0)=""/253, 0xfd}], &(0x7f0000000680)=[0x4, 0x800, 0x6]}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x400801, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 00:06:10 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 00:06:10 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 00:06:10 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x2102) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)}, 0x0) (async) recvmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000100)=""/3, 0x3}], 0x3}, 0x40012040) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 00:06:10 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) (async) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:10 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_setup(0x3f02, &(0x7f0000000100)={0x0, 0xb5a, 0x2, 0x1, 0xa6}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) 00:06:10 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100)={0x0, 0xe687}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:10 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_submit(r1, r2, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000001900)=[{0x9, 0x1, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000500)=""/111, 0x6f}], &(0x7f0000000580)=[0x3]}, {0x3, 0x1, 0x0, &(0x7f0000001880)=[{&(0x7f00000016c0)=""/136, 0x88}, {&(0x7f0000001780)=""/84, 0x54}, {&(0x7f0000001800)=""/81, 0x51}], &(0x7f00000018c0)=[0xa50, 0x8, 0x60]}], 0x2) 00:06:10 executing program 4: r0 = syz_io_uring_setup(0x6, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000002c0)={0xfff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000001c0)=""/179, 0xb3}], &(0x7f0000000280)=[0x7d2], 0x2}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 00:06:10 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_setup(0x3f02, &(0x7f0000000100)={0x0, 0xb5a, 0x2, 0x1, 0xa6}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) 00:06:11 executing program 4: r0 = syz_io_uring_setup(0x6, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000002c0)={0xfff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000001c0)=""/179, 0xb3}], &(0x7f0000000280)=[0x7d2], 0x2}, 0x20) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 00:06:11 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_setup(0x3f02, &(0x7f0000000100)={0x0, 0xb5a, 0x2, 0x1, 0xa6}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) 00:06:11 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) 00:06:11 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100)={0x0, 0xe687}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:11 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_submit(r1, r2, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000001900)=[{0x9, 0x1, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000500)=""/111, 0x6f}], &(0x7f0000000580)=[0x3]}, {0x3, 0x1, 0x0, &(0x7f0000001880)=[{&(0x7f00000016c0)=""/136, 0x88}, {&(0x7f0000001780)=""/84, 0x54}, {&(0x7f0000001800)=""/81, 0x51}], &(0x7f00000018c0)=[0xa50, 0x8, 0x60]}], 0x2) 00:06:11 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_submit(r1, r2, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000001900)=[{0x9, 0x1, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000500)=""/111, 0x6f}], &(0x7f0000000580)=[0x3]}, {0x3, 0x1, 0x0, &(0x7f0000001880)=[{&(0x7f00000016c0)=""/136, 0x88}, {&(0x7f0000001780)=""/84, 0x54}, {&(0x7f0000001800)=""/81, 0x51}], &(0x7f00000018c0)=[0xa50, 0x8, 0x60]}], 0x2) 00:06:11 executing program 4: r0 = syz_io_uring_setup(0x6, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000002c0)={0xfff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000001c0)=""/179, 0xb3}], &(0x7f0000000280)=[0x7d2], 0x2}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) 00:06:11 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = io_uring_setup(0x1eaf, &(0x7f0000000180)={0x0, 0xd6bb, 0x4, 0x1, 0x310}) r2 = syz_io_uring_setup(0x545d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000200), &(0x7f00000000c0)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x89e0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="01400000010000001800000082976dd6b9a9bf47619d107f803c8eae394fcbd0682234ffe07afc72a42066edbd2e00764b4d105dc5ff23220d6a2ad0e857d8d3000000000000000000000000000000645928a7162448d60aa6a5b0ac4c66a0df10c4831440aadd34a94c151e6d429dad5bc4a2694cd2fa031b883f21f3b48bd7eebe62e46ce7361bb252d9364237f3a9600b", @ANYRES32=r4, @ANYBLOB="02000000000000002e2f66696c653000"]) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r3], 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$igmp(0x2, 0x3, 0x2) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000002c0)="bad72415e8623a45178080883ecb98217948e676a65e7856ed2afd25ea6c8232cc2755b3c5adec9f25ec65414a5007f9aaa1e23aeaad4ada6fcd6204a97d46e056ac2ea5ddc418986887e6a01cd9ad7bf2a9ecfaa73ad35df40a979f2877286ef71320651dd6c5c0c3ceead113f1aaafb2b80fb780aafb59a77791902fd623229740fcb8aa7f16905333a7fce9839efe1514dd4a68c9486e4cd9b7d6c770ece69322e0c41a14b27a5541f8", 0xab) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)=[r0, r0, r5, r0, r0, r0]}, 0x6) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000280)={0x62, @broadcast, 0x4e23, 0x4, 'ovf\x00', 0x0, 0x1ff9, 0x34}, 0x2c) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:11 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100)={0x0, 0xe687}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:11 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_submit(r1, r2, 0xffffffffffffffff) 00:06:11 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) bind$isdn(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0xd4, 0x0, 0xa5}, 0x6) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:11 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r1 = io_uring_setup(0x1eaf, &(0x7f0000000180)={0x0, 0xd6bb, 0x4, 0x1, 0x310}) r2 = syz_io_uring_setup(0x545d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000200), &(0x7f00000000c0)) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x89e0, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="01400000010000001800000082976dd6b9a9bf47619d107f803c8eae394fcbd0682234ffe07afc72a42066edbd2e00764b4d105dc5ff23220d6a2ad0e857d8d3000000000000000000000000000000645928a7162448d60aa6a5b0ac4c66a0df10c4831440aadd34a94c151e6d429dad5bc4a2694cd2fa031b883f21f3b48bd7eebe62e46ce7361bb252d9364237f3a9600b", @ANYRES32=r4, @ANYBLOB="02000000000000002e2f66696c653000"]) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r3], 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) socket$igmp(0x2, 0x3, 0x2) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000002c0)="bad72415e8623a45178080883ecb98217948e676a65e7856ed2afd25ea6c8232cc2755b3c5adec9f25ec65414a5007f9aaa1e23aeaad4ada6fcd6204a97d46e056ac2ea5ddc418986887e6a01cd9ad7bf2a9ecfaa73ad35df40a979f2877286ef71320651dd6c5c0c3ceead113f1aaafb2b80fb780aafb59a77791902fd623229740fcb8aa7f16905333a7fce9839efe1514dd4a68c9486e4cd9b7d6c770ece69322e0c41a14b27a5541f8", 0xab) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)=[r0, r0, r5, r0, r0, r0]}, 0x6) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000280)={0x62, @broadcast, 0x4e23, 0x4, 'ovf\x00', 0x0, 0x1ff9, 0x34}, 0x2c) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:11 executing program 2: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @multicast2}, &(0x7f0000000140)=0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0xc0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xdd2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x5, '\x00', r0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pK \x00'}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffe5c, 0x0, 0x0, 0x0, 0x6ce1}]}, &(0x7f0000000440)='GPL\x00', 0x100, 0x0, 0x0, 0x40f00, 0x4, '\x00', r0, 0x25, r1, 0x8, &(0x7f00000004c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x0, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r2, r4, r5, r6, r7, r8, r9, r10], &(0x7f0000000880)=[{0x3, 0x3, 0xb, 0x4}, {0x1, 0x1, 0x6, 0x1}, {0x4, 0x1, 0xa, 0x9}, {0x2, 0x1, 0xd, 0x6}], 0x10, 0xd50}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=r0, 0x2f, 0x0, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0]}, 0x40) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="068388db904776c1b5ad6b0c2c5828a1bf7f8abaa443bfa5ffb4fb1a2a9c3d16c79b294725942eba00c8e27a21f400c8356c595fb69848ac0e6412ea287cf8c5"]) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x101400, 0x0) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x109000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r12, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r13, {r14}}, './file0\x00'}) r15 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r11}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r15, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:11 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) bind$isdn(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0xd4, 0x0, 0xa5}, 0x6) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) bind$isdn(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0xd4, 0x0, 0xa5}, 0x6) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) [ 1838.040491][ T4505] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003 00:06:11 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, 0xffffffffffffffff) 00:06:11 executing program 2: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @multicast2}, &(0x7f0000000140)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @multicast2}, &(0x7f0000000140)=0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0xc0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0xc0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$RTC_UIE_ON(r2, 0x7003) (async) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xdd2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x5, '\x00', r0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pK \x00'}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffe5c, 0x0, 0x0, 0x0, 0x6ce1}]}, &(0x7f0000000440)='GPL\x00', 0x100, 0x0, 0x0, 0x40f00, 0x4, '\x00', r0, 0x25, r1, 0x8, &(0x7f00000004c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x0, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r2, r4, r5, r6, r7, r8, r9, r10], &(0x7f0000000880)=[{0x3, 0x3, 0xb, 0x4}, {0x1, 0x1, 0x6, 0x1}, {0x4, 0x1, 0xa, 0x9}, {0x2, 0x1, 0xd, 0x6}], 0x10, 0xd50}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=r0, 0x2f, 0x0, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0]}, 0x40) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="068388db904776c1b5ad6b0c2c5828a1bf7f8abaa443bfa5ffb4fb1a2a9c3d16c79b294725942eba00c8e27a21f400c8356c595fb69848ac0e6412ea287cf8c5"]) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x101400, 0x0) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x109000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r12, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r13, {r14}}, './file0\x00'}) r15 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r11}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r15, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:11 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = io_uring_setup(0x1eaf, &(0x7f0000000180)={0x0, 0xd6bb, 0x4, 0x1, 0x310}) r2 = syz_io_uring_setup(0x545d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000200), &(0x7f00000000c0)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x89e0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="01400000010000001800000082976dd6b9a9bf47619d107f803c8eae394fcbd0682234ffe07afc72a42066edbd2e00764b4d105dc5ff23220d6a2ad0e857d8d3000000000000000000000000000000645928a7162448d60aa6a5b0ac4c66a0df10c4831440aadd34a94c151e6d429dad5bc4a2694cd2fa031b883f21f3b48bd7eebe62e46ce7361bb252d9364237f3a9600b", @ANYRES32=r4, @ANYBLOB="02000000000000002e2f66696c653000"]) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r3], 0x2) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000002c0)="bad72415e8623a45178080883ecb98217948e676a65e7856ed2afd25ea6c8232cc2755b3c5adec9f25ec65414a5007f9aaa1e23aeaad4ada6fcd6204a97d46e056ac2ea5ddc418986887e6a01cd9ad7bf2a9ecfaa73ad35df40a979f2877286ef71320651dd6c5c0c3ceead113f1aaafb2b80fb780aafb59a77791902fd623229740fcb8aa7f16905333a7fce9839efe1514dd4a68c9486e4cd9b7d6c770ece69322e0c41a14b27a5541f8", 0xab) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)=[r0, r0, r5, r0, r0, r0]}, 0x6) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000280)={0x62, @broadcast, 0x4e23, 0x4, 'ovf\x00', 0x0, 0x1ff9, 0x34}, 0x2c) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:11 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) bind$isdn(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0xd4, 0x0, 0xa5}, 0x6) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) bind$isdn(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0xd4, 0x0, 0xa5}, 0x6) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) 00:06:11 executing program 1: syz_io_uring_submit(0x0, 0x0, 0xffffffffffffffff) 00:06:11 executing program 2: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @multicast2}, &(0x7f0000000140)=0xc) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0xc0, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r5, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xdd2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x5, '\x00', r0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pK \x00'}, 0x20) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffe5c, 0x0, 0x0, 0x0, 0x6ce1}]}, &(0x7f0000000440)='GPL\x00', 0x100, 0x0, 0x0, 0x40f00, 0x4, '\x00', r0, 0x25, r1, 0x8, &(0x7f00000004c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x0, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r2, r4, r5, r6, r7, r8, r9, r10], &(0x7f0000000880)=[{0x3, 0x3, 0xb, 0x4}, {0x1, 0x1, 0x6, 0x1}, {0x4, 0x1, 0xa, 0x9}, {0x2, 0x1, 0xd, 0x6}], 0x10, 0xd50}, 0x90) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=r0, 0x2f, 0x0, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0]}, 0x40) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="068388db904776c1b5ad6b0c2c5828a1bf7f8abaa443bfa5ffb4fb1a2a9c3d16c79b294725942eba00c8e27a21f400c8356c595fb69848ac0e6412ea287cf8c5"]) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x101400, 0x0) (async) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x109000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r12, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r13, {r14}}, './file0\x00'}) r15 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r11}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r15, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:11 executing program 0: r0 = syz_io_uring_setup(0x44e5, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x100, 0xfffffffd}, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:11 executing program 1: syz_io_uring_submit(0x0, 0x0, 0xffffffffffffffff) 00:06:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="9079aaa1d3864620000000b8", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:11 executing program 0: r0 = syz_io_uring_setup(0x44e5, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x100, 0xfffffffd}, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:11 executing program 1: syz_io_uring_submit(0x0, 0x0, 0xffffffffffffffff) 00:06:11 executing program 4: r0 = io_uring_setup(0x2583, &(0x7f0000000100)={0x0, 0xe2e8, 0x40, 0x2, 0x355}) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000007b80)=[{0x1, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/180, 0xb4}], &(0x7f0000000280)=[0x6]}, {0x8, 0x1, 0x0, &(0x7f0000001880)=[{&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000440)=""/40, 0x28}, {&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/169, 0xa9}, {&(0x7f00000017c0)=""/172, 0xac}], &(0x7f0000001900)=[0x5, 0xfffffffffffffffb, 0x4, 0xe8, 0x3, 0x9, 0x9, 0x5, 0x6]}, {0x5, 0x1, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001980)=""/170, 0xaa}, {&(0x7f0000001a40)=""/227, 0xe3}, {&(0x7f0000001b40)=""/221, 0xdd}, {&(0x7f0000001c40)=""/101, 0x65}, {&(0x7f0000001cc0)=""/108, 0x6c}], &(0x7f0000000580)=[0x4, 0xfffffffffffffff7, 0x9, 0x5]}, {0x3, 0x1, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/9, 0x9}], &(0x7f0000003e40)=[0x40]}, {0x9, 0x1, 0x0, &(0x7f0000006380)=[{&(0x7f0000003e80)=""/198, 0xc6}, {&(0x7f0000003f80)=""/116, 0x74}, {&(0x7f0000004000)=""/164, 0xa4}, {&(0x7f00000040c0)=""/94, 0x5e}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/214, 0xd6}, {&(0x7f0000005240)=""/126, 0x7e}, {&(0x7f00000052c0)=""/143, 0x8f}, {&(0x7f0000005380)=""/4096, 0x1000}], &(0x7f0000006440)=[0x5, 0x0]}, {0x2, 0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000006480)=""/64, 0x40}, {&(0x7f00000064c0)=""/167, 0xa7}], &(0x7f00000065c0)=[0x4, 0x2, 0xf9, 0x7fffffff]}, {0x9, 0x1, 0x0, &(0x7f0000007a80)=[{&(0x7f0000006600)=""/110, 0x6e}, {&(0x7f0000006680)=""/183, 0xb7}, {&(0x7f0000006740)=""/105, 0x69}, {&(0x7f00000067c0)=""/114, 0x72}, {&(0x7f0000006840)=""/22, 0x16}, {&(0x7f0000006880)=""/4096, 0x1000}, {&(0x7f0000007880)=""/70, 0x46}, {&(0x7f0000007900)=""/162, 0xa2}, {&(0x7f00000079c0)=""/168, 0xa8}], &(0x7f0000007b40)=[0x1, 0xd7, 0x4, 0xe0]}], 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="9079aaa1d3864620000000b8", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:11 executing program 0: r0 = syz_io_uring_setup(0x44e5, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x100, 0xfffffffd}, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:11 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, 0xffffffffffffffff) 00:06:11 executing program 4: r0 = io_uring_setup(0x2583, &(0x7f0000000100)={0x0, 0xe2e8, 0x40, 0x2, 0x355}) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000007b80)=[{0x1, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/180, 0xb4}], &(0x7f0000000280)=[0x6]}, {0x8, 0x1, 0x0, &(0x7f0000001880)=[{&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000440)=""/40, 0x28}, {&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/169, 0xa9}, {&(0x7f00000017c0)=""/172, 0xac}], &(0x7f0000001900)=[0x5, 0xfffffffffffffffb, 0x4, 0xe8, 0x3, 0x9, 0x9, 0x5, 0x6]}, {0x5, 0x1, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001980)=""/170, 0xaa}, {&(0x7f0000001a40)=""/227, 0xe3}, {&(0x7f0000001b40)=""/221, 0xdd}, {&(0x7f0000001c40)=""/101, 0x65}, {&(0x7f0000001cc0)=""/108, 0x6c}], &(0x7f0000000580)=[0x4, 0xfffffffffffffff7, 0x9, 0x5]}, {0x3, 0x1, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/9, 0x9}], &(0x7f0000003e40)=[0x40]}, {0x9, 0x1, 0x0, &(0x7f0000006380)=[{&(0x7f0000003e80)=""/198, 0xc6}, {&(0x7f0000003f80)=""/116, 0x74}, {&(0x7f0000004000)=""/164, 0xa4}, {&(0x7f00000040c0)=""/94, 0x5e}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/214, 0xd6}, {&(0x7f0000005240)=""/126, 0x7e}, {&(0x7f00000052c0)=""/143, 0x8f}, {&(0x7f0000005380)=""/4096, 0x1000}], &(0x7f0000006440)=[0x5, 0x0]}, {0x2, 0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000006480)=""/64, 0x40}, {&(0x7f00000064c0)=""/167, 0xa7}], &(0x7f00000065c0)=[0x4, 0x2, 0xf9, 0x7fffffff]}, {0x9, 0x1, 0x0, &(0x7f0000007a80)=[{&(0x7f0000006600)=""/110, 0x6e}, {&(0x7f0000006680)=""/183, 0xb7}, {&(0x7f0000006740)=""/105, 0x69}, {&(0x7f00000067c0)=""/114, 0x72}, {&(0x7f0000006840)=""/22, 0x16}, {&(0x7f0000006880)=""/4096, 0x1000}, {&(0x7f0000007880)=""/70, 0x46}, {&(0x7f0000007900)=""/162, 0xa2}, {&(0x7f00000079c0)=""/168, 0xa8}], &(0x7f0000007b40)=[0x1, 0xd7, 0x4, 0xe0]}], 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:11 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x6c, 0x0, @fd_index=0x2, 0x10001, 0x0, 0x1ff, 0x0, 0x0, {0x0, r3}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:11 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, 0xffffffffffffffff) 00:06:12 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x6c, 0x0, @fd_index=0x2, 0x10001, 0x0, 0x1ff, 0x0, 0x0, {0x0, r3}}) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:12 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="9079aaa1d3864620000000b8", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:12 executing program 4: r0 = io_uring_setup(0x2583, &(0x7f0000000100)={0x0, 0xe2e8, 0x40, 0x2, 0x355}) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000007b80)=[{0x1, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/180, 0xb4}], &(0x7f0000000280)=[0x6]}, {0x8, 0x1, 0x0, &(0x7f0000001880)=[{&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000440)=""/40, 0x28}, {&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/169, 0xa9}, {&(0x7f00000017c0)=""/172, 0xac}], &(0x7f0000001900)=[0x5, 0xfffffffffffffffb, 0x4, 0xe8, 0x3, 0x9, 0x9, 0x5, 0x6]}, {0x5, 0x1, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001980)=""/170, 0xaa}, {&(0x7f0000001a40)=""/227, 0xe3}, {&(0x7f0000001b40)=""/221, 0xdd}, {&(0x7f0000001c40)=""/101, 0x65}, {&(0x7f0000001cc0)=""/108, 0x6c}], &(0x7f0000000580)=[0x4, 0xfffffffffffffff7, 0x9, 0x5]}, {0x3, 0x1, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/9, 0x9}], &(0x7f0000003e40)=[0x40]}, {0x9, 0x1, 0x0, &(0x7f0000006380)=[{&(0x7f0000003e80)=""/198, 0xc6}, {&(0x7f0000003f80)=""/116, 0x74}, {&(0x7f0000004000)=""/164, 0xa4}, {&(0x7f00000040c0)=""/94, 0x5e}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/214, 0xd6}, {&(0x7f0000005240)=""/126, 0x7e}, {&(0x7f00000052c0)=""/143, 0x8f}, {&(0x7f0000005380)=""/4096, 0x1000}], &(0x7f0000006440)=[0x5, 0x0]}, {0x2, 0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000006480)=""/64, 0x40}, {&(0x7f00000064c0)=""/167, 0xa7}], &(0x7f00000065c0)=[0x4, 0x2, 0xf9, 0x7fffffff]}, {0x9, 0x1, 0x0, &(0x7f0000007a80)=[{&(0x7f0000006600)=""/110, 0x6e}, {&(0x7f0000006680)=""/183, 0xb7}, {&(0x7f0000006740)=""/105, 0x69}, {&(0x7f00000067c0)=""/114, 0x72}, {&(0x7f0000006840)=""/22, 0x16}, {&(0x7f0000006880)=""/4096, 0x1000}, {&(0x7f0000007880)=""/70, 0x46}, {&(0x7f0000007900)=""/162, 0xa2}, {&(0x7f00000079c0)=""/168, 0xa8}], &(0x7f0000007b40)=[0x1, 0xd7, 0x4, 0xe0]}], 0x7) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:12 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) 00:06:12 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, 0xffffffffffffffff) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, 0xffffffffffffffff) 00:06:12 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) set_tid_address(&(0x7f0000000100)) 00:06:12 executing program 0: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x6c, 0x0, @fd_index=0x2, 0x10001, 0x0, 0x1ff, 0x0, 0x0, {0x0, r3}}) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:12 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, 0xffffffffffffffff) 00:06:12 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) set_tid_address(&(0x7f0000000100)) 00:06:12 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:12 executing program 0: r0 = syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x8004cf2, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)=""/4081, 0xff1}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001200)=""/96, 0x60}], 0xfffffffffffff1a) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, 0xffffffffffffffff) 00:06:12 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) set_tid_address(&(0x7f0000000100)) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) set_tid_address(&(0x7f0000000100)) (async) 00:06:12 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:12 executing program 0: r0 = syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x8004cf2, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)=""/4081, 0xff1}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001200)=""/96, 0x60}], 0xfffffffffffff1a) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, 0xffffffffffffffff) 00:06:12 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcfd}}, './file0\x00'}) r0 = io_uring_setup(0x120d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{0xfffffffffffffffc}], 0x1) r1 = syz_io_uring_setup(0x2856, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x305, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200)) r2 = syz_io_uring_setup(0x5, &(0x7f0000000240)={0x0, 0xb827, 0x8, 0x2, 0x3a9, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000340)={&(0x7f0000001000)={[{&(0x7f0000000400)="be6aa5dc62038b54d487f983ec78495f2273ac40331d6041312e7f83ce2aaac62298634c4d76ee4595313c90997258b1c6f3434132a658cfbd5b3c6710caba37ddaa0cc9b584aa2dbe32c0f2ba454f38553e5ac5cf5e4c5572cbf969c87c9efdeadff8e055ab4c4ecdd5c4448598f659208c99dac1b84a67a6799a5ae2dfcba756644cb94f66d2e2840e", 0x8a, 0x2}, {&(0x7f00000004c0)="d3201f7e568be6bd35e6db1cb873ad4225dd77b7444ad6aa3213dfe35519c9d0bb5ccb4e3eeab09a0eb732623b81ccb22ec3f592cfd060cd5b771259f4d697dbfb325d84943591f4d2e25c0cb071b16bb5ad405a815597292d46fc76ceedd6a3ff305b85be13981792ad6ebfe5920714d4c5027737fac77fddbda20ba1eb651280a3c747abd5d73c95d44c2ab8e15116e9817c0a2161760de59bb425acf76e2a26ff0ebdecc2b6e1056a9ae8e2a97c0e545904a3a32bb33ef75bba1aeb4c59a471bd51ac437289f9da481d7f86e0c38129ce4aaacf1246a05f441f70140f0096740b8be87df36a9b5f91f4594328", 0xee, 0x1}]}, 0x2, 0x2}, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required={0x3, 0xd}], 0x1) 00:06:12 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000580)={0x2, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/243, 0xf3}], &(0x7f0000000540)=[0x4b7, 0x7ff, 0x7], 0x5}, 0x20) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000036c0)=[{0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/88, 0x58}], &(0x7f0000000680)=[0x4be, 0x3, 0x4, 0xfffffffffffffff8, 0x5, 0x0, 0x1]}, {0x4, 0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000700)=""/181, 0xb5}, {&(0x7f00000007c0)=""/12, 0xc}, {&(0x7f0000000800)=""/157, 0x9d}], &(0x7f0000000900)=[0x1, 0x5a4f75dc, 0x80, 0x8]}, {0x6, 0x1, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f0000000a40)=""/12, 0xc}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b00)=""/89, 0x59}, {&(0x7f0000000b80)=""/4096, 0x1000}], &(0x7f0000001c00)=[0x8, 0x3, 0x1, 0x49b, 0x3, 0x1d0]}, {0x7, 0x1, 0x0, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/148, 0x94}, {&(0x7f0000001d00)=""/39, 0x27}, {&(0x7f0000001d40)=""/69, 0x45}, {&(0x7f0000001dc0)=""/107, 0x6b}, {&(0x7f0000001e40)=""/231, 0xe7}, {&(0x7f0000001f40)=""/192, 0xc0}, {&(0x7f0000002000)=""/125, 0x7d}], &(0x7f0000002100)=[0x1, 0x38, 0x7, 0x4, 0x9]}, {0x9, 0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002140)=""/11, 0xb}, {&(0x7f0000002180)=""/145, 0x91}, {&(0x7f0000002240)=""/170, 0xaa}, {&(0x7f0000002300)=""/36, 0x24}, {&(0x7f0000002340)=""/211, 0xd3}, {&(0x7f0000002440)=""/17, 0x11}, {&(0x7f0000002480)=""/166, 0xa6}, {&(0x7f0000002540)=""/121, 0x79}, {&(0x7f00000025c0)=""/4096, 0x1000}], &(0x7f0000003680)=[0x6, 0x100, 0x8, 0x4f111122, 0x1]}], 0x5) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100), 0x0) 00:06:12 executing program 0: r0 = syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x8004cf2, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)=""/4081, 0xff1}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001200)=""/96, 0x60}], 0xfffffffffffff1a) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, 0xffffffffffffffff) 00:06:12 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000580)={0x2, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/243, 0xf3}], &(0x7f0000000540)=[0x4b7, 0x7ff, 0x7], 0x5}, 0x20) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000036c0)=[{0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/88, 0x58}], &(0x7f0000000680)=[0x4be, 0x3, 0x4, 0xfffffffffffffff8, 0x5, 0x0, 0x1]}, {0x4, 0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000700)=""/181, 0xb5}, {&(0x7f00000007c0)=""/12, 0xc}, {&(0x7f0000000800)=""/157, 0x9d}], &(0x7f0000000900)=[0x1, 0x5a4f75dc, 0x80, 0x8]}, {0x6, 0x1, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f0000000a40)=""/12, 0xc}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b00)=""/89, 0x59}, {&(0x7f0000000b80)=""/4096, 0x1000}], &(0x7f0000001c00)=[0x8, 0x3, 0x1, 0x49b, 0x3, 0x1d0]}, {0x7, 0x1, 0x0, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/148, 0x94}, {&(0x7f0000001d00)=""/39, 0x27}, {&(0x7f0000001d40)=""/69, 0x45}, {&(0x7f0000001dc0)=""/107, 0x6b}, {&(0x7f0000001e40)=""/231, 0xe7}, {&(0x7f0000001f40)=""/192, 0xc0}, {&(0x7f0000002000)=""/125, 0x7d}], &(0x7f0000002100)=[0x1, 0x38, 0x7, 0x4, 0x9]}, {0x9, 0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002140)=""/11, 0xb}, {&(0x7f0000002180)=""/145, 0x91}, {&(0x7f0000002240)=""/170, 0xaa}, {&(0x7f0000002300)=""/36, 0x24}, {&(0x7f0000002340)=""/211, 0xd3}, {&(0x7f0000002440)=""/17, 0x11}, {&(0x7f0000002480)=""/166, 0xa6}, {&(0x7f0000002540)=""/121, 0x79}, {&(0x7f00000025c0)=""/4096, 0x1000}], &(0x7f0000003680)=[0x6, 0x100, 0x8, 0x4f111122, 0x1]}], 0x5) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000580)={0x2, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/243, 0xf3}], &(0x7f0000000540)=[0x4b7, 0x7ff, 0x7], 0x5}, 0x20) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000036c0)=[{0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/88, 0x58}], &(0x7f0000000680)=[0x4be, 0x3, 0x4, 0xfffffffffffffff8, 0x5, 0x0, 0x1]}, {0x4, 0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000700)=""/181, 0xb5}, {&(0x7f00000007c0)=""/12, 0xc}, {&(0x7f0000000800)=""/157, 0x9d}], &(0x7f0000000900)=[0x1, 0x5a4f75dc, 0x80, 0x8]}, {0x6, 0x1, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f0000000a40)=""/12, 0xc}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b00)=""/89, 0x59}, {&(0x7f0000000b80)=""/4096, 0x1000}], &(0x7f0000001c00)=[0x8, 0x3, 0x1, 0x49b, 0x3, 0x1d0]}, {0x7, 0x1, 0x0, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/148, 0x94}, {&(0x7f0000001d00)=""/39, 0x27}, {&(0x7f0000001d40)=""/69, 0x45}, {&(0x7f0000001dc0)=""/107, 0x6b}, {&(0x7f0000001e40)=""/231, 0xe7}, {&(0x7f0000001f40)=""/192, 0xc0}, {&(0x7f0000002000)=""/125, 0x7d}], &(0x7f0000002100)=[0x1, 0x38, 0x7, 0x4, 0x9]}, {0x9, 0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002140)=""/11, 0xb}, {&(0x7f0000002180)=""/145, 0x91}, {&(0x7f0000002240)=""/170, 0xaa}, {&(0x7f0000002300)=""/36, 0x24}, {&(0x7f0000002340)=""/211, 0xd3}, {&(0x7f0000002440)=""/17, 0x11}, {&(0x7f0000002480)=""/166, 0xa6}, {&(0x7f0000002540)=""/121, 0x79}, {&(0x7f00000025c0)=""/4096, 0x1000}], &(0x7f0000003680)=[0x6, 0x100, 0x8, 0x4f111122, 0x1]}], 0x5) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100), 0x0) (async) 00:06:12 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcfd}}, './file0\x00'}) r0 = io_uring_setup(0x120d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{0xfffffffffffffffc}], 0x1) r1 = syz_io_uring_setup(0x2856, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x305, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200)) r2 = syz_io_uring_setup(0x5, &(0x7f0000000240)={0x0, 0xb827, 0x8, 0x2, 0x3a9, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000340)={&(0x7f0000001000)={[{&(0x7f0000000400)="be6aa5dc62038b54d487f983ec78495f2273ac40331d6041312e7f83ce2aaac62298634c4d76ee4595313c90997258b1c6f3434132a658cfbd5b3c6710caba37ddaa0cc9b584aa2dbe32c0f2ba454f38553e5ac5cf5e4c5572cbf969c87c9efdeadff8e055ab4c4ecdd5c4448598f659208c99dac1b84a67a6799a5ae2dfcba756644cb94f66d2e2840e", 0x8a, 0x2}, {&(0x7f00000004c0)="d3201f7e568be6bd35e6db1cb873ad4225dd77b7444ad6aa3213dfe35519c9d0bb5ccb4e3eeab09a0eb732623b81ccb22ec3f592cfd060cd5b771259f4d697dbfb325d84943591f4d2e25c0cb071b16bb5ad405a815597292d46fc76ceedd6a3ff305b85be13981792ad6ebfe5920714d4c5027737fac77fddbda20ba1eb651280a3c747abd5d73c95d44c2ab8e15116e9817c0a2161760de59bb425acf76e2a26ff0ebdecc2b6e1056a9ae8e2a97c0e545904a3a32bb33ef75bba1aeb4c59a471bd51ac437289f9da481d7f86e0c38129ce4aaacf1246a05f441f70140f0096740b8be87df36a9b5f91f4594328", 0xee, 0x1}]}, 0x2, 0x2}, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required={0x3, 0xd}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcfd}}, './file0\x00'}) (async) io_uring_setup(0x120d, &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{0xfffffffffffffffc}], 0x1) (async) syz_io_uring_setup(0x2856, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x305, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) (async) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200)) (async) syz_io_uring_setup(0x5, &(0x7f0000000240)={0x0, 0xb827, 0x8, 0x2, 0x3a9, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) (async) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000340)={&(0x7f0000001000)={[{&(0x7f0000000400)="be6aa5dc62038b54d487f983ec78495f2273ac40331d6041312e7f83ce2aaac62298634c4d76ee4595313c90997258b1c6f3434132a658cfbd5b3c6710caba37ddaa0cc9b584aa2dbe32c0f2ba454f38553e5ac5cf5e4c5572cbf969c87c9efdeadff8e055ab4c4ecdd5c4448598f659208c99dac1b84a67a6799a5ae2dfcba756644cb94f66d2e2840e", 0x8a, 0x2}, {&(0x7f00000004c0)="d3201f7e568be6bd35e6db1cb873ad4225dd77b7444ad6aa3213dfe35519c9d0bb5ccb4e3eeab09a0eb732623b81ccb22ec3f592cfd060cd5b771259f4d697dbfb325d84943591f4d2e25c0cb071b16bb5ad405a815597292d46fc76ceedd6a3ff305b85be13981792ad6ebfe5920714d4c5027737fac77fddbda20ba1eb651280a3c747abd5d73c95d44c2ab8e15116e9817c0a2161760de59bb425acf76e2a26ff0ebdecc2b6e1056a9ae8e2a97c0e545904a3a32bb33ef75bba1aeb4c59a471bd51ac437289f9da481d7f86e0c38129ce4aaacf1246a05f441f70140f0096740b8be87df36a9b5f91f4594328", 0xee, 0x1}]}, 0x2, 0x2}, 0x1) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required={0x3, 0xd}], 0x1) (async) 00:06:12 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x8004cf2, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:12 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcfd}}, './file0\x00'}) r0 = io_uring_setup(0x120d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{0xfffffffffffffffc}], 0x1) r1 = syz_io_uring_setup(0x2856, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x305, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200)) r2 = syz_io_uring_setup(0x5, &(0x7f0000000240)={0x0, 0xb827, 0x8, 0x2, 0x3a9, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000340)={&(0x7f0000001000)={[{&(0x7f0000000400)="be6aa5dc62038b54d487f983ec78495f2273ac40331d6041312e7f83ce2aaac62298634c4d76ee4595313c90997258b1c6f3434132a658cfbd5b3c6710caba37ddaa0cc9b584aa2dbe32c0f2ba454f38553e5ac5cf5e4c5572cbf969c87c9efdeadff8e055ab4c4ecdd5c4448598f659208c99dac1b84a67a6799a5ae2dfcba756644cb94f66d2e2840e", 0x8a, 0x2}, {&(0x7f00000004c0)="d3201f7e568be6bd35e6db1cb873ad4225dd77b7444ad6aa3213dfe35519c9d0bb5ccb4e3eeab09a0eb732623b81ccb22ec3f592cfd060cd5b771259f4d697dbfb325d84943591f4d2e25c0cb071b16bb5ad405a815597292d46fc76ceedd6a3ff305b85be13981792ad6ebfe5920714d4c5027737fac77fddbda20ba1eb651280a3c747abd5d73c95d44c2ab8e15116e9817c0a2161760de59bb425acf76e2a26ff0ebdecc2b6e1056a9ae8e2a97c0e545904a3a32bb33ef75bba1aeb4c59a471bd51ac437289f9da481d7f86e0c38129ce4aaacf1246a05f441f70140f0096740b8be87df36a9b5f91f4594328", 0xee, 0x1}]}, 0x2, 0x2}, 0x1) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required={0x3, 0xd}], 0x1) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, 0xffffffffffffffff) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0xffffffffffffffff) 00:06:12 executing program 2: syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000580)={0x2, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/243, 0xf3}], &(0x7f0000000540)=[0x4b7, 0x7ff, 0x7], 0x5}, 0x20) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000036c0)=[{0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/88, 0x58}], &(0x7f0000000680)=[0x4be, 0x3, 0x4, 0xfffffffffffffff8, 0x5, 0x0, 0x1]}, {0x4, 0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000700)=""/181, 0xb5}, {&(0x7f00000007c0)=""/12, 0xc}, {&(0x7f0000000800)=""/157, 0x9d}], &(0x7f0000000900)=[0x1, 0x5a4f75dc, 0x80, 0x8]}, {0x6, 0x1, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f0000000a40)=""/12, 0xc}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b00)=""/89, 0x59}, {&(0x7f0000000b80)=""/4096, 0x1000}], &(0x7f0000001c00)=[0x8, 0x3, 0x1, 0x49b, 0x3, 0x1d0]}, {0x7, 0x1, 0x0, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/148, 0x94}, {&(0x7f0000001d00)=""/39, 0x27}, {&(0x7f0000001d40)=""/69, 0x45}, {&(0x7f0000001dc0)=""/107, 0x6b}, {&(0x7f0000001e40)=""/231, 0xe7}, {&(0x7f0000001f40)=""/192, 0xc0}, {&(0x7f0000002000)=""/125, 0x7d}], &(0x7f0000002100)=[0x1, 0x38, 0x7, 0x4, 0x9]}, {0x9, 0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002140)=""/11, 0xb}, {&(0x7f0000002180)=""/145, 0x91}, {&(0x7f0000002240)=""/170, 0xaa}, {&(0x7f0000002300)=""/36, 0x24}, {&(0x7f0000002340)=""/211, 0xd3}, {&(0x7f0000002440)=""/17, 0x11}, {&(0x7f0000002480)=""/166, 0xa6}, {&(0x7f0000002540)=""/121, 0x79}, {&(0x7f00000025c0)=""/4096, 0x1000}], &(0x7f0000003680)=[0x6, 0x100, 0x8, 0x4f111122, 0x1]}], 0x5) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100), 0x0) 00:06:12 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x8004cf2, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:12 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0xe, 0x1, 0x9, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0xffffffffffffffff) 00:06:12 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x8004cf2, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:12 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0xe, 0x1, 0x9, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:12 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000500)={0x8, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)}], &(0x7f00000004c0)=[0x200, 0x100000000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff]}, 0x20) 00:06:12 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0xffffffffffffffff) 00:06:12 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x8004cf2, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:12 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000500)={0x8, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)}], &(0x7f00000004c0)=[0x200, 0x100000000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff]}, 0x20) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, 0xffffffffffffffff) 00:06:12 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0xe, 0x1, 0x9, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:12 executing program 0: syz_io_uring_setup(0x6254, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:12 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x420cc0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000043c0)=[{0x4, 0x1, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/237, 0xed}], &(0x7f00000004c0)=[0x7, 0x8000000000000000]}, {0x6, 0x1, 0x0, &(0x7f0000001880)=[{&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/23, 0x17}, {&(0x7f0000001780)=""/247, 0xf7}], &(0x7f0000001900)=[0x800000000, 0x1, 0x4, 0x3, 0x5, 0x4]}, {0x6, 0x1, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001940)=""/71, 0x47}, {&(0x7f00000019c0)=""/219, 0xdb}, {&(0x7f0000001ac0)=""/202, 0xca}, {&(0x7f0000001bc0)=""/238, 0xee}, {&(0x7f0000001cc0)=""/172, 0xac}, {&(0x7f0000001d80)=""/4096, 0x1000}], &(0x7f0000002e00)=[0x7fffffffffffffff, 0x6, 0x63, 0x838b, 0x0]}, {0x7, 0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000002e40)=""/195, 0xc3}, {&(0x7f0000002f40)=""/223, 0xdf}, {&(0x7f0000003040)=""/122, 0x7a}, {&(0x7f00000030c0)=""/130, 0x82}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/134, 0x86}, {&(0x7f0000004240)=""/166, 0xa6}], &(0x7f0000004380)=[0x8, 0x3, 0x103d, 0x6, 0x8]}], 0x4) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:12 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000500)={0x8, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)}], &(0x7f00000004c0)=[0x200, 0x100000000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff]}, 0x20) 00:06:12 executing program 0: syz_io_uring_setup(0x6254, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, 0xffffffffffffffff) 00:06:12 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x420cc0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x420cc0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000043c0)=[{0x4, 0x1, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/237, 0xed}], &(0x7f00000004c0)=[0x7, 0x8000000000000000]}, {0x6, 0x1, 0x0, &(0x7f0000001880)=[{&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/23, 0x17}, {&(0x7f0000001780)=""/247, 0xf7}], &(0x7f0000001900)=[0x800000000, 0x1, 0x4, 0x3, 0x5, 0x4]}, {0x6, 0x1, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001940)=""/71, 0x47}, {&(0x7f00000019c0)=""/219, 0xdb}, {&(0x7f0000001ac0)=""/202, 0xca}, {&(0x7f0000001bc0)=""/238, 0xee}, {&(0x7f0000001cc0)=""/172, 0xac}, {&(0x7f0000001d80)=""/4096, 0x1000}], &(0x7f0000002e00)=[0x7fffffffffffffff, 0x6, 0x63, 0x838b, 0x0]}, {0x7, 0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000002e40)=""/195, 0xc3}, {&(0x7f0000002f40)=""/223, 0xdf}, {&(0x7f0000003040)=""/122, 0x7a}, {&(0x7f00000030c0)=""/130, 0x82}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/134, 0x86}, {&(0x7f0000004240)=""/166, 0xa6}], &(0x7f0000004380)=[0x8, 0x3, 0x103d, 0x6, 0x8]}], 0x4) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:12 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, 0xffffffffffffffff) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80081, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x94}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x871}}, './file0\x00'}) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80081, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x94}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x871}}, './file0\x00'}) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80081, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x94}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x871}}, './file0\x00'}) (async) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:13 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x420cc0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000043c0)=[{0x4, 0x1, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/237, 0xed}], &(0x7f00000004c0)=[0x7, 0x8000000000000000]}, {0x6, 0x1, 0x0, &(0x7f0000001880)=[{&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/23, 0x17}, {&(0x7f0000001780)=""/247, 0xf7}], &(0x7f0000001900)=[0x800000000, 0x1, 0x4, 0x3, 0x5, 0x4]}, {0x6, 0x1, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001940)=""/71, 0x47}, {&(0x7f00000019c0)=""/219, 0xdb}, {&(0x7f0000001ac0)=""/202, 0xca}, {&(0x7f0000001bc0)=""/238, 0xee}, {&(0x7f0000001cc0)=""/172, 0xac}, {&(0x7f0000001d80)=""/4096, 0x1000}], &(0x7f0000002e00)=[0x7fffffffffffffff, 0x6, 0x63, 0x838b, 0x0]}, {0x7, 0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000002e40)=""/195, 0xc3}, {&(0x7f0000002f40)=""/223, 0xdf}, {&(0x7f0000003040)=""/122, 0x7a}, {&(0x7f00000030c0)=""/130, 0x82}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/134, 0x86}, {&(0x7f0000004240)=""/166, 0xa6}], &(0x7f0000004380)=[0x8, 0x3, 0x103d, 0x6, 0x8]}], 0x4) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:13 executing program 1: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, 0xffffffffffffffff) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x94}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x871}}, './file0\x00'}) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:13 executing program 4: r0 = syz_io_uring_setup(0x617d, &(0x7f0000000100)={0x0, 0xd842, 0x800, 0x0, 0x3b3}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0xd}], 0x1) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:13 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = syz_io_uring_setup(0x709b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x14, &(0x7f0000000bc0)="984f1d5a", 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket(0xa, 0x5, 0x0) recvmsg$can_raw(r4, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r1, r3, r4], 0x3) r5 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) r6 = syz_io_uring_setup(0xe68, &(0x7f0000002c00), &(0x7f0000002c80), &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000001680)=""/4096, 0x1000}], &(0x7f0000000280)=[0xd69]}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) 00:06:13 executing program 4: r0 = syz_io_uring_setup(0x617d, &(0x7f0000000100)={0x0, 0xd842, 0x800, 0x0, 0x3b3}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0xd}], 0x1) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:13 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:13 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = syz_io_uring_setup(0x709b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x14, &(0x7f0000000bc0)="984f1d5a", 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket(0xa, 0x5, 0x0) recvmsg$can_raw(r4, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r1, r3, r4], 0x3) r5 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) r6 = syz_io_uring_setup(0xe68, &(0x7f0000002c00), &(0x7f0000002c80), &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000001680)=""/4096, 0x1000}], &(0x7f0000000280)=[0xd69]}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) 00:06:13 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:13 executing program 4: r0 = syz_io_uring_setup(0x617d, &(0x7f0000000100)={0x0, 0xd842, 0x800, 0x0, 0x3b3}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0xd}], 0x1) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x617d, &(0x7f0000000100)={0x0, 0xd842, 0x800, 0x0, 0x3b3}, &(0x7f0000000180), &(0x7f00000001c0)) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0xd}], 0x1) (async) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) [ 1839.956855][ T4733] autofs4:pid:4733:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:13 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1840.007224][ T4742] autofs4:pid:4742:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:13 executing program 4: r0 = syz_io_uring_setup(0x43b6, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x0, 0xfffffffd}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:13 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:13 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = syz_io_uring_setup(0x709b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x14, &(0x7f0000000bc0)="984f1d5a", 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket(0xa, 0x5, 0x0) recvmsg$can_raw(r4, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r1, r3, r4], 0x3) r5 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) r6 = syz_io_uring_setup(0xe68, &(0x7f0000002c00), &(0x7f0000002c80), &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000001680)=""/4096, 0x1000}], &(0x7f0000000280)=[0xd69]}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) 00:06:13 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:13 executing program 4: r0 = syz_io_uring_setup(0x43b6, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x0, 0xfffffffd}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) 00:06:13 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) 00:06:13 executing program 4: r0 = syz_io_uring_setup(0x43b6, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x0, 0xfffffffd}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_io_uring_setup(0x43b6, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x0, 0xfffffffd}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) (async) 00:06:13 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:13 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = syz_io_uring_setup(0x709b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x14, &(0x7f0000000bc0)="984f1d5a", 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 1840.616512][ T4763] autofs4:pid:4763:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x0, &(0x7f00000000c0)) 00:06:13 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x9160, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x0, &(0x7f00000000c0)) 00:06:13 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x9160, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x9160, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) 00:06:13 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = syz_io_uring_setup(0x709b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x14, &(0x7f0000000bc0)="984f1d5a", 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x0, &(0x7f00000000c0)) [ 1840.712942][ T4792] autofs4:pid:4792:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:13 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000340)={0x0, 0xa04c, 0x2, 0x2, 0x2f7}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002900), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000029c0)={0x28, r4, 0x15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd8, r6, 0x4dadd536a1e96117, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3534}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x18}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2501"], 0x30}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r7) r9 = socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r13 = socket(0x25, 0x5, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000081) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa000002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r13}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000002}, 0x20004000) 00:06:13 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffe}, &(0x7f0000000080), 0x0) 00:06:14 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = syz_io_uring_setup(0x709b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x14, &(0x7f0000000bc0)="984f1d5a", 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:14 executing program 4: syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x9160, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x9160, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:14 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffe}, &(0x7f0000000080), 0x0) 00:06:14 executing program 0: syz_io_uring_setup(0x6254, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffe}, &(0x7f0000000080), 0x0) 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x47b1, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x2000, 0x300003}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x74e, &(0x7f00000023c0), &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = syz_io_uring_setup(0x35f6, &(0x7f0000000000)={0x0, 0x97a9}, &(0x7f0000000080), &(0x7f00000000c0)) r4 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000100)=r4, 0x1) socket$inet(0x2, 0x1, 0x780e) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000)=r4, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_op={0x1, 0x19}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_required={0x3, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x4}], 0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) [ 1840.793723][ T4808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4808 comm=syz-executor.2 [ 1840.812936][ T4808] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 00:06:14 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = syz_io_uring_setup(0x709b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x14, &(0x7f0000000bc0)="984f1d5a", 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x47b1, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x2000, 0x300003}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x74e, &(0x7f00000023c0), &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = syz_io_uring_setup(0x35f6, &(0x7f0000000000)={0x0, 0x97a9}, &(0x7f0000000080), &(0x7f00000000c0)) r4 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000100)=r4, 0x1) socket$inet(0x2, 0x1, 0x780e) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000)=r4, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_op={0x1, 0x19}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_required={0x3, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x4}], 0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) syz_io_uring_setup(0x47b1, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x2000, 0x300003}, &(0x7f0000000080), &(0x7f0000000100)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) syz_io_uring_setup(0x74e, &(0x7f00000023c0), &(0x7f0000002440), &(0x7f0000002480)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x35f6, &(0x7f0000000000)={0x0, 0x97a9}, &(0x7f0000000080), &(0x7f00000000c0)) (async) eventfd(0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000100)=r4, 0x1) (async) socket$inet(0x2, 0x1, 0x780e) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000)=r4, 0x1) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_op={0x1, 0x19}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_required={0x3, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x4}], 0x4) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) (async) 00:06:14 executing program 0: syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) syz_emit_ethernet(0x2da, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "b35237", 0x2a4, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x33, 0x3e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}, @fragment={0x87, 0x0, 0xff, 0x1, 0x0, 0x5, 0x64}, @routing={0x84, 0xe, 0x1, 0x0, 0x0, [@loopback, @mcast2, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote]}, @fragment={0x6c, 0x0, 0x65, 0x0, 0x0, 0xe, 0x67}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r0]}, 0x2) write$tun(r1, &(0x7f0000000480)={@void, @val={0x2, 0x0, 0x3, 0x6, 0x2, 0x6}, @eth={@random="eaca490b2f5a", @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "5c841a", 0x48d, 0x21, 0x1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0x16, 0x2, 0x4, 0x1, 0x20, 0x20, 0x6, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, @dstopts={0x2f, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0x40, 0x1e, "594961cb07cbcbc08f13e425ef3e6e15e35e17c0c3cb493f74c5a7da7314"}, @ra={0x5, 0x2, 0x1f}]}, @hopopts={0x6e, 0x2b, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x7f, 0x5, [0x6, 0x10000, 0x9]}}, @jumbo={0xc2, 0x4, 0xfffffff8}, @calipso={0x7, 0x48, {0x1, 0x10, 0x40, 0x2, [0x3f, 0xfffffffffffffff8, 0x0, 0x1, 0x3ff, 0x5, 0x1, 0x9]}}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x70d}, @hao={0xc9, 0x10, @loopback}, @generic={0x1, 0x88, "50558054542c3f70ea7e46b6516e90a0254862d958d1d1d8903f98a2b3e05b140258635541ab78f14277e08153da6968f90cc1e4d21a06887d658b7cca3de9e5391c2f64f3fcf2f1fd98337281af34fec7e4a233c9825a0eda1069abe910f9bc69f2b890b008c8df9eaf2e89d1815787856c993e2769b11108242ed77b513735793ff91bd8a0bc6e"}, @pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x40, [0x4cb, 0xf96, 0x4, 0xd9, 0x9, 0x1, 0xfff]}}, @enc_lim={0x4, 0x1, 0x5}]}, @srh={0x89, 0x12, 0x4, 0x9, 0xb6, 0x60, 0x3f, [@local, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x3b, 0x1c, '\x00', [@generic={0x80, 0xd9, "de9b2aa28df04ef85e3048e224cd1d3b6db64f8b669e26b5cccbfa7c4f15a810fd834467501bad0c542a9836dbf8370be6bc3b08c78dd54877529decfcff4f9f65dd7b029f78086d2b5067561b12f674b05cbc66a275808e7377bf85126a2081b2dcf1780ff4f1e0390ac27f31a02cd9ede1d61f04d2856c2030e11cef08c3da21d1253eb0150531fbfad06f2028a8765c9320bbc114342690713bd9a32b60cdef841944cb93603785fcb2b18660586cdec4fa4268e907cb81e27986e26553372967c4a12bceb6b34863207b93ba41305c1a8e502c5a78b8ac"}, @jumbo, @padn={0x1, 0x1, [0x0]}]}, @fragment={0x8, 0x0, 0x20, 0x1, 0x0, 0x10, 0x68}, @hopopts={0x16, 0xf, '\x00', [@generic={0x9, 0x63, "a31aeead014ea175d02f867e6f0cd522639f053f5883d65724cbd079cfb7cc253ea3848994a580188a2f25777bd13b81be18fc66e89c9bffc655d12078f51c13a4535963822ea9cbab5dbe6e65f2d39de8f550e9f66c83806ae485270930417cf4d932"}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, @routing={0x21, 0x0, 0x1, 0x5}, @routing={0x4, 0x6, 0x0, 0x2, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x11}, @private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x4e20, 0x4e20, 0x4, 0x1, 0xc, 0x0, 0x0, 0x2, 0x5, "949ee8", 0x1, "db10b7"}, "bd95d0be493af020e127ba97f187ae7637c250c31996a76fe33be0567fa0d89377992ce5c97bd28b17fd03abe01c85a806bf3a6c656bec79ab4b67807785e6fd7b2eaabd0ccab2d1e5899c1c5a4f690310bd648cf2cf040b292d462d46103bb89621551990aa51e811ad3b722d95d680c44b8ac005"}}}}}}}, 0x4cd) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) clock_gettime(0x3, &(0x7f0000000440)) 00:06:14 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000340)={0x0, 0xa04c, 0x2, 0x2, 0x2f7}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002900), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000029c0)={0x28, r4, 0x15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r6, 0x1}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd8, r6, 0x4dadd536a1e96117, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3534}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x18}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (rerun: 64) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2501"], 0x30}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r7) r9 = socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r9) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async, rerun: 32) r13 = socket(0x25, 0x5, 0x0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000081) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa000002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r13}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000002}, 0x20004000) [ 1840.854977][ T4808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4808 comm=syz-executor.2 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x47b1, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x2000, 0x300003}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x74e, &(0x7f00000023c0), &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x35f6, &(0x7f0000000000)={0x0, 0x97a9}, &(0x7f0000000080), &(0x7f00000000c0)) r4 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000100)=r4, 0x1) socket$inet(0x2, 0x1, 0x780e) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000)=r4, 0x1) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_op={0x1, 0x19}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_required={0x3, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x4}], 0x4) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 00:06:14 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = syz_io_uring_setup(0x709b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x14, &(0x7f0000000bc0)="984f1d5a", 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:14 executing program 0: syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) syz_emit_ethernet(0x2da, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "b35237", 0x2a4, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x33, 0x3e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}, @fragment={0x87, 0x0, 0xff, 0x1, 0x0, 0x5, 0x64}, @routing={0x84, 0xe, 0x1, 0x0, 0x0, [@loopback, @mcast2, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote]}, @fragment={0x6c, 0x0, 0x65, 0x0, 0x0, 0xe, 0x67}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r0]}, 0x2) write$tun(r1, &(0x7f0000000480)={@void, @val={0x2, 0x0, 0x3, 0x6, 0x2, 0x6}, @eth={@random="eaca490b2f5a", @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "5c841a", 0x48d, 0x21, 0x1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0x16, 0x2, 0x4, 0x1, 0x20, 0x20, 0x6, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, @dstopts={0x2f, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0x40, 0x1e, "594961cb07cbcbc08f13e425ef3e6e15e35e17c0c3cb493f74c5a7da7314"}, @ra={0x5, 0x2, 0x1f}]}, @hopopts={0x6e, 0x2b, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x7f, 0x5, [0x6, 0x10000, 0x9]}}, @jumbo={0xc2, 0x4, 0xfffffff8}, @calipso={0x7, 0x48, {0x1, 0x10, 0x40, 0x2, [0x3f, 0xfffffffffffffff8, 0x0, 0x1, 0x3ff, 0x5, 0x1, 0x9]}}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x70d}, @hao={0xc9, 0x10, @loopback}, @generic={0x1, 0x88, "50558054542c3f70ea7e46b6516e90a0254862d958d1d1d8903f98a2b3e05b140258635541ab78f14277e08153da6968f90cc1e4d21a06887d658b7cca3de9e5391c2f64f3fcf2f1fd98337281af34fec7e4a233c9825a0eda1069abe910f9bc69f2b890b008c8df9eaf2e89d1815787856c993e2769b11108242ed77b513735793ff91bd8a0bc6e"}, @pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x40, [0x4cb, 0xf96, 0x4, 0xd9, 0x9, 0x1, 0xfff]}}, @enc_lim={0x4, 0x1, 0x5}]}, @srh={0x89, 0x12, 0x4, 0x9, 0xb6, 0x60, 0x3f, [@local, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x3b, 0x1c, '\x00', [@generic={0x80, 0xd9, "de9b2aa28df04ef85e3048e224cd1d3b6db64f8b669e26b5cccbfa7c4f15a810fd834467501bad0c542a9836dbf8370be6bc3b08c78dd54877529decfcff4f9f65dd7b029f78086d2b5067561b12f674b05cbc66a275808e7377bf85126a2081b2dcf1780ff4f1e0390ac27f31a02cd9ede1d61f04d2856c2030e11cef08c3da21d1253eb0150531fbfad06f2028a8765c9320bbc114342690713bd9a32b60cdef841944cb93603785fcb2b18660586cdec4fa4268e907cb81e27986e26553372967c4a12bceb6b34863207b93ba41305c1a8e502c5a78b8ac"}, @jumbo, @padn={0x1, 0x1, [0x0]}]}, @fragment={0x8, 0x0, 0x20, 0x1, 0x0, 0x10, 0x68}, @hopopts={0x16, 0xf, '\x00', [@generic={0x9, 0x63, "a31aeead014ea175d02f867e6f0cd522639f053f5883d65724cbd079cfb7cc253ea3848994a580188a2f25777bd13b81be18fc66e89c9bffc655d12078f51c13a4535963822ea9cbab5dbe6e65f2d39de8f550e9f66c83806ae485270930417cf4d932"}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, @routing={0x21, 0x0, 0x1, 0x5}, @routing={0x4, 0x6, 0x0, 0x2, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x11}, @private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x4e20, 0x4e20, 0x4, 0x1, 0xc, 0x0, 0x0, 0x2, 0x5, "949ee8", 0x1, "db10b7"}, "bd95d0be493af020e127ba97f187ae7637c250c31996a76fe33be0567fa0d89377992ce5c97bd28b17fd03abe01c85a806bf3a6c656bec79ab4b67807785e6fd7b2eaabd0ccab2d1e5899c1c5a4f690310bd648cf2cf040b292d462d46103bb89621551990aa51e811ad3b722d95d680c44b8ac005"}}}}}}}, 0x4cd) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) clock_gettime(0x3, &(0x7f0000000440)) 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000780)={0x7, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000580)}, {&(0x7f0000000600)=""/188, 0xbc}], &(0x7f0000000740)=[0x3, 0xc522, 0x80]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_setup(0x6c7c, &(0x7f0000000100)={0x0, 0xab2, 0x10, 0x1, 0x13d}) 00:06:14 executing program 0: syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) syz_emit_ethernet(0x2da, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "b35237", 0x2a4, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x33, 0x3e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}, @fragment={0x87, 0x0, 0xff, 0x1, 0x0, 0x5, 0x64}, @routing={0x84, 0xe, 0x1, 0x0, 0x0, [@loopback, @mcast2, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote]}, @fragment={0x6c, 0x0, 0x65, 0x0, 0x0, 0xe, 0x67}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r0]}, 0x2) write$tun(r1, &(0x7f0000000480)={@void, @val={0x2, 0x0, 0x3, 0x6, 0x2, 0x6}, @eth={@random="eaca490b2f5a", @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "5c841a", 0x48d, 0x21, 0x1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0x16, 0x2, 0x4, 0x1, 0x20, 0x20, 0x6, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, @dstopts={0x2f, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0x40, 0x1e, "594961cb07cbcbc08f13e425ef3e6e15e35e17c0c3cb493f74c5a7da7314"}, @ra={0x5, 0x2, 0x1f}]}, @hopopts={0x6e, 0x2b, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x7f, 0x5, [0x6, 0x10000, 0x9]}}, @jumbo={0xc2, 0x4, 0xfffffff8}, @calipso={0x7, 0x48, {0x1, 0x10, 0x40, 0x2, [0x3f, 0xfffffffffffffff8, 0x0, 0x1, 0x3ff, 0x5, 0x1, 0x9]}}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x70d}, @hao={0xc9, 0x10, @loopback}, @generic={0x1, 0x88, "50558054542c3f70ea7e46b6516e90a0254862d958d1d1d8903f98a2b3e05b140258635541ab78f14277e08153da6968f90cc1e4d21a06887d658b7cca3de9e5391c2f64f3fcf2f1fd98337281af34fec7e4a233c9825a0eda1069abe910f9bc69f2b890b008c8df9eaf2e89d1815787856c993e2769b11108242ed77b513735793ff91bd8a0bc6e"}, @pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x40, [0x4cb, 0xf96, 0x4, 0xd9, 0x9, 0x1, 0xfff]}}, @enc_lim={0x4, 0x1, 0x5}]}, @srh={0x89, 0x12, 0x4, 0x9, 0xb6, 0x60, 0x3f, [@local, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x3b, 0x1c, '\x00', [@generic={0x80, 0xd9, "de9b2aa28df04ef85e3048e224cd1d3b6db64f8b669e26b5cccbfa7c4f15a810fd834467501bad0c542a9836dbf8370be6bc3b08c78dd54877529decfcff4f9f65dd7b029f78086d2b5067561b12f674b05cbc66a275808e7377bf85126a2081b2dcf1780ff4f1e0390ac27f31a02cd9ede1d61f04d2856c2030e11cef08c3da21d1253eb0150531fbfad06f2028a8765c9320bbc114342690713bd9a32b60cdef841944cb93603785fcb2b18660586cdec4fa4268e907cb81e27986e26553372967c4a12bceb6b34863207b93ba41305c1a8e502c5a78b8ac"}, @jumbo, @padn={0x1, 0x1, [0x0]}]}, @fragment={0x8, 0x0, 0x20, 0x1, 0x0, 0x10, 0x68}, @hopopts={0x16, 0xf, '\x00', [@generic={0x9, 0x63, "a31aeead014ea175d02f867e6f0cd522639f053f5883d65724cbd079cfb7cc253ea3848994a580188a2f25777bd13b81be18fc66e89c9bffc655d12078f51c13a4535963822ea9cbab5dbe6e65f2d39de8f550e9f66c83806ae485270930417cf4d932"}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, @routing={0x21, 0x0, 0x1, 0x5}, @routing={0x4, 0x6, 0x0, 0x2, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x11}, @private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x4e20, 0x4e20, 0x4, 0x1, 0xc, 0x0, 0x0, 0x2, 0x5, "949ee8", 0x1, "db10b7"}, "bd95d0be493af020e127ba97f187ae7637c250c31996a76fe33be0567fa0d89377992ce5c97bd28b17fd03abe01c85a806bf3a6c656bec79ab4b67807785e6fd7b2eaabd0ccab2d1e5899c1c5a4f690310bd648cf2cf040b292d462d46103bb89621551990aa51e811ad3b722d95d680c44b8ac005"}}}}}}}, 0x4cd) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) clock_gettime(0x3, &(0x7f0000000440)) [ 1840.948801][ T4840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4840 comm=syz-executor.2 [ 1840.965565][ T4851] autofs4:pid:4851:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 1840.983152][ T4848] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1840.993360][ T4840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4840 comm=syz-executor.2 [ 1841.013373][ T4840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4840 comm=syz-executor.2 00:06:14 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000780)={0x7, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000580)}, {&(0x7f0000000600)=""/188, 0xbc}], &(0x7f0000000740)=[0x3, 0xc522, 0x80]}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_setup(0x6c7c, &(0x7f0000000100)={0x0, 0xab2, 0x10, 0x1, 0x13d}) 00:06:14 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = syz_io_uring_setup(0x709b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:14 executing program 0: syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) syz_emit_ethernet(0x2da, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "b35237", 0x2a4, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x33, 0x3e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}, @fragment={0x87, 0x0, 0xff, 0x1, 0x0, 0x5, 0x64}, @routing={0x84, 0xe, 0x1, 0x0, 0x0, [@loopback, @mcast2, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote]}, @fragment={0x6c, 0x0, 0x65, 0x0, 0x0, 0xe, 0x67}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:14 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000340)={0x0, 0xa04c, 0x2, 0x2, 0x2f7}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002900), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000029c0)={0x28, r4, 0x15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket(0x10, 0x2, 0x0) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd8, r6, 0x4dadd536a1e96117, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3534}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x18}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2501"], 0x30}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r7) (async) r9 = socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r13 = socket(0x25, 0x5, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000081) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa000002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r13}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000002}, 0x20004000) 00:06:14 executing program 0: syz_emit_ethernet(0x2da, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "b35237", 0x2a4, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x33, 0x3e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}, @fragment={0x87, 0x0, 0xff, 0x1, 0x0, 0x5, 0x64}, @routing={0x84, 0xe, 0x1, 0x0, 0x0, [@loopback, @mcast2, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote]}, @fragment={0x6c, 0x0, 0x65, 0x0, 0x0, 0xe, 0x67}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:14 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = syz_io_uring_setup(0x709b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:14 executing program 0: syz_emit_ethernet(0x0, 0x0, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000780)={0x7, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000580)}, {&(0x7f0000000600)=""/188, 0xbc}], &(0x7f0000000740)=[0x3, 0xc522, 0x80]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_setup(0x6c7c, &(0x7f0000000100)={0x0, 0xab2, 0x10, 0x1, 0x13d}) [ 1841.443642][ T4863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4863 comm=syz-executor.2 [ 1841.459534][ T4868] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1841.460808][ T4869] autofs4:pid:4869:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 1841.475904][ T4868] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4868 comm=syz-executor.2 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x47b8, &(0x7f0000000180)={0x0, 0xd649, 0x1}, &(0x7f0000000080), &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:14 executing program 0: syz_emit_ethernet(0x0, 0x0, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:14 executing program 0: syz_emit_ethernet(0x0, 0x0, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x47b8, &(0x7f0000000180)={0x0, 0xd649, 0x1}, &(0x7f0000000080), &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:14 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) syz_io_uring_setup(0x709b, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 1841.519110][ T4881] autofs4:pid:4881:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000c000000080005000500000018"], 0x44}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x50}}, 0x20004080) syz_io_uring_setup(0x52e0, &(0x7f0000000100)={0x0, 0xdd2e, 0x8, 0x1, 0x386}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x6ac8, &(0x7f0000000200)={0x0, 0x714, 0x2, 0x3, 0x151}, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) r5 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x47b8, &(0x7f0000000180)={0x0, 0xd649, 0x1}, &(0x7f0000000080), &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:14 executing program 0: syz_emit_ethernet(0x2da, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x2a4, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x33, 0x3e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}, @fragment={0x87, 0x0, 0xff, 0x1, 0x0, 0x5, 0x64}, @routing={0x84, 0xe, 0x1, 0x0, 0x0, [@loopback, @mcast2, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote]}, @fragment={0x6c, 0x0, 0x65, 0x0, 0x0, 0xe, 0x67}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:14 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000c000000080005000500000018"], 0x44}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x50}}, 0x20004080) syz_io_uring_setup(0x52e0, &(0x7f0000000100)={0x0, 0xdd2e, 0x8, 0x1, 0x386}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) (async) syz_io_uring_setup(0x6ac8, &(0x7f0000000200)={0x0, 0x714, 0x2, 0x3, 0x151}, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) r5 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1841.600475][ T4896] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1841.606191][ T4898] autofs4:pid:4898:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:14 executing program 0: syz_emit_ethernet(0x2d2, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x29c, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x33, 0x3e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}, @fragment={0x87, 0x0, 0xff, 0x1, 0x0, 0x5, 0x64}, @routing={0x84, 0xe, 0x1, 0x0, 0x0, [@loopback, @mcast2, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @remote]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x78d3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x10000000, 0xffffffff}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:14 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x78d3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x10000000, 0xffffffff}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:14 executing program 0: syz_emit_ethernet(0x25a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x224, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x33, 0x3e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}, @fragment={0x87, 0x0, 0xff, 0x1, 0x0, 0x5, 0x64}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) [ 1841.648873][ T4905] autofs4:pid:4905:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x78d3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x10000000, 0xffffffff}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000c000000080005000500000018"], 0x44}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x50}}, 0x20004080) syz_io_uring_setup(0x52e0, &(0x7f0000000100)={0x0, 0xdd2e, 0x8, 0x1, 0x386}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) (async) syz_io_uring_setup(0x6ac8, &(0x7f0000000200)={0x0, 0x714, 0x2, 0x3, 0x151}, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) r5 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:14 executing program 0: syz_emit_ethernet(0x252, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x21c, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x33, 0x3e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:14 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:14 executing program 0: syz_emit_ethernet(0x52, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x1c, 0x21, 0x0, @remote, @mcast2, {[], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:14 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000180)=[@ioring_restriction_sqe_op={0x1, 0x1}, @ioring_restriction_register_op={0x0, 0x4}, @ioring_restriction_register_op={0x0, 0x5}], 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001b80)=[r2, r0, r0, r0], 0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001c40), 0xc0043, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@base={0x14, 0x4, 0x1, 0x8, 0x141, r4, 0x8885, '\x00', r1, r4, 0x0, 0x1, 0x4}, 0x48) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r6, {0xee01, r7}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000001d80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000328bd70000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000140002007776310000000000000000000000000008000500010000000800010000", @ANYRES32=r1, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000040000000000007eb1", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r1, r4, 0x0, 0x0, 0x4}, 0x48) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000001b00)=[{0x3, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/84, 0x54}], &(0x7f0000001680)=[0x2, 0x5]}, {0x6, 0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000016c0)=""/50, 0x32}, {&(0x7f0000001700)=""/89, 0x59}, {&(0x7f0000001780)=""/253, 0xfd}, {&(0x7f0000001880)=""/243, 0xf3}, {&(0x7f0000001980)=""/74, 0x4a}, {&(0x7f0000001a00)=""/16, 0x10}], &(0x7f0000001ac0)=[0x8]}], 0x2) r10 = io_uring_setup(0x1009, &(0x7f0000000100)={0x0, 0xde12, 0x20, 0x2, 0x315}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f00000002c0)=""/42, 0x2a}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x4e5e, &(0x7f00000003c0)={0x0, 0x5f8d, 0x20, 0x2, 0xce}, &(0x7f0000001bc0), &(0x7f0000000480)) io_uring_setup(0x5455, &(0x7f0000000340)={0x0, 0xbea6, 0x40, 0x2, 0x2ca, 0x0, r10}) ioctl$RTC_UIE_OFF(r4, 0x7004) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:14 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 1841.695133][ T4917] autofs4:pid:4917:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 1841.732128][ T4925] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 00:06:14 executing program 0: syz_emit_ethernet(0x52, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x1c, 0x21, 0x0, @remote, @mcast2, {[], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:15 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:15 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x545d, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r2, r3], 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x9, 0x1f, 0x2, 0x5, 0x2503]}, &(0x7f0000000200)=0x78) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x810, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000400), &(0x7f0000000100)=[0xfffffffffffffffd, 0xcf74, 0xfffffffffffffffa, 0x3, 0x8, 0x2, 0x1]}, 0x20) 00:06:15 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:15 executing program 0: syz_emit_ethernet(0x52, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x1c, 0x21, 0x0, @remote, @mcast2, {[], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:15 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000180)=[@ioring_restriction_sqe_op={0x1, 0x1}, @ioring_restriction_register_op={0x0, 0x4}, @ioring_restriction_register_op={0x0, 0x5}], 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001b80)=[r2, r0, r0, r0], 0x4) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) (async, rerun: 64) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) (rerun: 64) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001c40), 0xc0043, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@base={0x14, 0x4, 0x1, 0x8, 0x141, r4, 0x8885, '\x00', r1, r4, 0x0, 0x1, 0x4}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r6, {0xee01, r7}}, './file0\x00'}) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) (async) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000001d80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000328bd70000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000140002007776310000000000000000000000000008000500010000000800010000", @ANYRES32=r1, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000040000000000007eb1", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r1, r4, 0x0, 0x0, 0x4}, 0x48) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000001b00)=[{0x3, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/84, 0x54}], &(0x7f0000001680)=[0x2, 0x5]}, {0x6, 0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000016c0)=""/50, 0x32}, {&(0x7f0000001700)=""/89, 0x59}, {&(0x7f0000001780)=""/253, 0xfd}, {&(0x7f0000001880)=""/243, 0xf3}, {&(0x7f0000001980)=""/74, 0x4a}, {&(0x7f0000001a00)=""/16, 0x10}], &(0x7f0000001ac0)=[0x8]}], 0x2) (rerun: 32) r10 = io_uring_setup(0x1009, &(0x7f0000000100)={0x0, 0xde12, 0x20, 0x2, 0x315}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f00000002c0)=""/42, 0x2a}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) syz_io_uring_setup(0x4e5e, &(0x7f00000003c0)={0x0, 0x5f8d, 0x20, 0x2, 0xce}, &(0x7f0000001bc0), &(0x7f0000000480)) io_uring_setup(0x5455, &(0x7f0000000340)={0x0, 0xbea6, 0x40, 0x2, 0x2ca, 0x0, r10}) ioctl$RTC_UIE_OFF(r4, 0x7004) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (rerun: 32) 00:06:15 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:15 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:15 executing program 0: syz_emit_ethernet(0x252, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x21c, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x0, 0x3e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:15 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x545d, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r2, r3], 0x2) (async) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x9, 0x1f, 0x2, 0x5, 0x2503]}, &(0x7f0000000200)=0x78) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x810, r0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000400), &(0x7f0000000100)=[0xfffffffffffffffd, 0xcf74, 0xfffffffffffffffa, 0x3, 0x8, 0x2, 0x1]}, 0x20) 00:06:15 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 00:06:15 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000180)=[@ioring_restriction_sqe_op={0x1, 0x1}, @ioring_restriction_register_op={0x0, 0x4}, @ioring_restriction_register_op={0x0, 0x5}], 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001b80)=[r2, r0, r0, r0], 0x4) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001c40), 0xc0043, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@base={0x14, 0x4, 0x1, 0x8, 0x141, r4, 0x8885, '\x00', r1, r4, 0x0, 0x1, 0x4}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r6, {0xee01, r7}}, './file0\x00'}) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) (async) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000001d80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000328bd70000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000140002007776310000000000000000000000000008000500010000000800010000", @ANYRES32=r1, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000040000000000007eb1", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r1, r4, 0x0, 0x0, 0x4}, 0x48) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000001b00)=[{0x3, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/84, 0x54}], &(0x7f0000001680)=[0x2, 0x5]}, {0x6, 0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000016c0)=""/50, 0x32}, {&(0x7f0000001700)=""/89, 0x59}, {&(0x7f0000001780)=""/253, 0xfd}, {&(0x7f0000001880)=""/243, 0xf3}, {&(0x7f0000001980)=""/74, 0x4a}, {&(0x7f0000001a00)=""/16, 0x10}], &(0x7f0000001ac0)=[0x8]}], 0x2) r10 = io_uring_setup(0x1009, &(0x7f0000000100)={0x0, 0xde12, 0x20, 0x2, 0x315}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f00000002c0)=""/42, 0x2a}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) syz_io_uring_setup(0x4e5e, &(0x7f00000003c0)={0x0, 0x5f8d, 0x20, 0x2, 0xce}, &(0x7f0000001bc0), &(0x7f0000000480)) io_uring_setup(0x5455, &(0x7f0000000340)={0x0, 0xbea6, 0x40, 0x2, 0x2ca, 0x0, r10}) (async) ioctl$RTC_UIE_OFF(r4, 0x7004) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:15 executing program 0: syz_emit_ethernet(0x252, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x21c, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x0, 0x3e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}, @jumbo={0xc2, 0x4, 0x3}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:15 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x545d, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r2, r3], 0x2) (async) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x9, 0x1f, 0x2, 0x5, 0x2503]}, &(0x7f0000000200)=0x78) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x810, r0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000400), &(0x7f0000000100)=[0xfffffffffffffffd, 0xcf74, 0xfffffffffffffffa, 0x3, 0x8, 0x2, 0x1]}, 0x20) 00:06:15 executing program 0: syz_emit_ethernet(0x24a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x214, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x0, 0x3d, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x81, 0xce, "4f570cfa4f80d4b2f8ce1cbf39e5ce2f930984f14fa030ad11590ae9ee1ce31d9d04fc3294a920b774645ac574a4425a7812f6c557821974f58048ffd3212ea4614ba216737e6cb4b7217d582e4a2d73e9af7b2563e6bdfbdbb3aaeb0a2e6f87e8b34a36422b3b127800736b63376c66a1d3d28f66c01520af0db45068e8c65dfccc3b2d91e066f0cb9a9a41f0f1319c244ea38cc9b3f68d10dc2ceb88f0491ed5192b88a80742888e4b0b7f1247604b88b8d5c91aafc09992526eefc40e2bd3d19865f1fa950e1733bbb5ce60d1"}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:15 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 00:06:15 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/154, 0x9a}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:15 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 00:06:15 executing program 2: r0 = syz_io_uring_setup(0x3dc9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:15 executing program 0: syz_emit_ethernet(0x17a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x144, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x0, 0x23, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:15 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/154, 0x9a}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/154, 0x9a}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) 00:06:15 executing program 0: syz_emit_ethernet(0x172, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x13c, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x0, 0x23, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}, @hao={0xc9, 0x10, @private0}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:15 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 00:06:15 executing program 2: r0 = syz_io_uring_setup(0x3dc9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x3dc9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:15 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/154, 0x9a}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:15 executing program 0: syz_emit_ethernet(0x162, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x12c, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x0, 0x20, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1, @jumbo={0xc2, 0x4, 0x85f3}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:15 executing program 2: r0 = syz_io_uring_setup(0x3dc9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:15 executing program 0: syz_emit_ethernet(0x15a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x124, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x0, 0x20, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}, @pad1]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:15 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30", @ANYRES32]) 00:06:15 executing program 4: r0 = syz_io_uring_setup(0x4867, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:15 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x73, 0x7fffffff], 0x2) 00:06:15 executing program 0: syz_emit_ethernet(0x15a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x124, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x0, 0x1f, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0xf7, "2630520a0c6297aa677aa4275188222ac68fc2394a083e3ecc13ce8693ad279b4b805b4c68fbb86f672098e017204e59d3ce5794b0991539029fd0efca8ae00e50aa5aec392ef0e0b0df5cb0604208781e53cca1dc9c49f3f2376d795913e846d2d90c63cf275dbc856a35c33bc39f11c9f6383e6a67f56329934717c2439e3ff2b127ebfb59c9cb7e5ddac093b1925b95943eb9f1795d9be9fa132b54938f6b4a1fb38384ddae6437515af17c6693ea0a1538e90848210e18c840f6b27517025c949ad4751ab61a8fc4283b1f21ef9b2d750c4d008b8fce3854ea0918ae2a9b61a601c3cda2a3b3b9009ecb07afeda0b06e2cb84aeb92"}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:15 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1700000000000000, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1842.517471][ T5026] autofs4:pid:5026:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x14, 0x0, 0x815}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x124, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000801}, 0x40850) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x28fc, &(0x7f0000000100)={0x0, 0xd80b, 0x2, 0x1, 0x2d9, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000480)={&(0x7f0000001000)={[{&(0x7f0000000200)="ad08cbf8aaec8dd5284795edc556f04f7a8fd85e1029525bea321884aeb4cd036c7bda1037e20fc1c4b8dea47cc9fb589e81eaa25c7ddc95fa089f3b45389ce1aaa1cd1a0349d03b2f3c150b8a65d5edc0008a39ce6c5a9d57adf78938c8fffb359e1fab70065b52a3556e81701ca1047bb4e288bd8c66af59ec7903c3d0374b90ccf13dfdd29da0aae06fa31c173060452b2d4fe07d94d97512448349305ae63faf6ddc494a23fd285f7b9f877ffff6e16e83ccfe3233e258acd9d98ab09bf66c0fc43bd4a04b83b3e009c16e2260eaa877f7091008", 0xd6}, {&(0x7f0000000300)="a5cee32d5aa6e884986869e7e2058d1895efd4545d0065ccef1797e525a505fa0150a17be38a4f3530f74de7a3c76c8fd8a129b90db23d2055e06c7a3990da0231d1c68a7695bb9f42fa686d60a4f70705c6e0915833e8b8626edb0f9e78f8726d0ec600fa1c60d04f8a7c3145ea4073a2363c49cbf2b4e407832aaa1bc657ed7509a5bdd88709c0850fb29484098fea1f2a213f2d9045affb087339f147688ccaa868167c08ebd1de3ef99d8d2c06d25deab652361b820c76eaa58b52a2339cf9408a8c661c33dd9df38691ee5808854b1eb83db31633c80ce312715c991162f4699fa419ed0438d32168a5", 0xec}, {&(0x7f0000000400)="42351609dd7c9a6e0aa65e7e545595c3377e43f822d4b2cc1365c4f9dde444cbd1dec49dbccdbe4f66f7e957acd736ae054d942de4765f5d40c9f6338e1d2717855ca84607e4e3b9f12f9500f17bd08a6d80c50f3986e55b9541", 0x5a, 0x3}]}, 0x3, 0x2}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 00:06:16 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda05785898951053265c80f86639a6473546fc69074557a8d856a44cb8459a16a6d743160995aa3be66b64dfd2978eebaa258ba31ff80ec0f0337ba0a0e8d53a07688b24cc4bb08ec23de7e1923d1c0fc68057c477f72dca35cf1ba67c54e79aa51ecd30"]) 00:06:16 executing program 0: syz_emit_ethernet(0x62, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x2c, 0x21, 0x0, @remote, @mcast2, {[@dstopts={0x0, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:16 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x73, 0x7fffffff], 0x2) 00:06:16 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:16 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x73, 0x7fffffff], 0x2) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x73, 0x7fffffff], 0x2) 00:06:16 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x24, 0x21, 0x0, @remote, @mcast2, {[@dstopts], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:16 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x2, 0x31, 0x44, 0x64, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) r0 = syz_io_uring_setup(0x74e, &(0x7f00000023c0)={0x0, 0x2b08}, &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005c00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x35}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x279}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004010}, 0x800) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:16 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[]) [ 1843.173889][ T5041] autofs4:pid:5041:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:16 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x2, 0x31, 0x44, 0x64, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) r0 = syz_io_uring_setup(0x74e, &(0x7f00000023c0)={0x0, 0x2b08}, &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005c00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x35}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x279}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004010}, 0x800) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:16 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_setup(0x3664, &(0x7f0000000100)={0x0, 0x3338, 0x80, 0x0, 0xc2, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:16 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[]) 00:06:16 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x24, 0x21, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:16 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x2, 0x31, 0x44, 0x64, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) r0 = syz_io_uring_setup(0x74e, &(0x7f00000023c0)={0x0, 0x2b08}, &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005c00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x35}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x279}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004010}, 0x800) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:16 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_setup(0x3664, &(0x7f0000000100)={0x0, 0x3338, 0x80, 0x0, 0xc2, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) io_uring_setup(0x3664, &(0x7f0000000100)={0x0, 0x3338, 0x80, 0x0, 0xc2, 0x0, r1}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:16 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[]) 00:06:16 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x24, 0x21, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:16 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_setup(0x3664, &(0x7f0000000100)={0x0, 0x3338, 0x80, 0x0, 0xc2, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) io_uring_setup(0x3664, &(0x7f0000000100)={0x0, 0x3338, 0x80, 0x0, 0xc2, 0x0, r1}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:16 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x2, 0x31, 0x44, 0x64, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:16 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB]) 00:06:16 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x24, 0x21, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:16 executing program 2: r0 = syz_io_uring_setup(0x45b8, &(0x7f0000000000)={0x0, 0xb03, 0x20}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:16 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:16 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB]) 00:06:16 executing program 2: r0 = syz_io_uring_setup(0x45b8, &(0x7f0000000000)={0x0, 0xb03, 0x20}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:16 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:16 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x24, 0x21, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:16 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB]) 00:06:16 executing program 2: r0 = syz_io_uring_setup(0x45b8, &(0x7f0000000000)={0x0, 0xb03, 0x20}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x45b8, &(0x7f0000000000)={0x0, 0xb03, 0x20}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:16 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:16 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x24, 0x21, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d1c021", 0x8, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:16 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa059e23c546c89ac32316f17b8f08ed069882eb8f9290a1fda"]) [ 1843.428456][ T5109] autofs4:pid:5109:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:17 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) r4 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:17 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x2, 0x31, 0x44, 0x64, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:17 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x28, r2, 0x201, 0x0, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240480a0}, 0x4) 00:06:17 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x24, 0x21, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d1c021", 0x0, "f69323"}, "a30f86a7360d1e0599c0ebac"}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:17 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB]) 00:06:17 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x18, 0x21, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d1c021", 0x0, "f69323"}}}}}}}, &(0x7f0000000380)={0x1, 0x1, [0x6c5, 0x862, 0x600, 0xa93]}) 00:06:17 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x31, 0x44, 0x64, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:17 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b35237", 0x18, 0x21, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d1c021", 0x0, "f69323"}}}}}}}, 0x0) 00:06:17 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB]) 00:06:17 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x64, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) connect$pppoe(r2, &(0x7f0000000600)={0x18, 0x0, {0x0, @remote, 'veth1_to_bond\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100800a2e6a910018", @ANYRES32=r0]) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x100, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffe01}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xee}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc17}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x44) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {0x3ff}}, './file0\x00'}) r6 = syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) r7 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x2ad, 0x0, r6}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r5) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)={0x88, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x20}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x40}]}, 0x88}, 0x1, 0x0, 0x0, 0x40840}, 0x4008010) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) 00:06:17 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x28, r2, 0x201, 0x0, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x28, r2, 0x201, 0x0, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240480a0}, 0x4) 00:06:17 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:17 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB]) 00:06:17 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:17 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x28, r2, 0x201, 0x0, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240480a0}, 0x4) 00:06:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) connect$pppoe(r2, &(0x7f0000000600)={0x18, 0x0, {0x0, @remote, 'veth1_to_bond\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100800a2e6a910018", @ANYRES32=r0]) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x100, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffe01}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xee}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc17}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x44) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {0x3ff}}, './file0\x00'}) r6 = syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) r7 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x2ad, 0x0, r6}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r5) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)={0x88, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x20}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x40}]}, 0x88}, 0x1, 0x0, 0x0, 0x40840}, 0x4008010) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) 00:06:17 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:17 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52"]) [ 1844.091874][ T5132] autofs4:pid:5132:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(176160769.9529902), cmd(0xc0189375) [ 1844.106251][ T5132] autofs4:pid:5132:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 00:06:17 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:17 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0xfffffffc, 0x0, &(0x7f0000000100)=[r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0, r0]}, 0xa) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000240), 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:17 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52"]) 00:06:17 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:17 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0xfffffffc, 0x0, &(0x7f0000000100)=[r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0, r0]}, 0xa) (async, rerun: 32) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000240), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) connect$pppoe(r2, &(0x7f0000000600)={0x18, 0x0, {0x0, @remote, 'veth1_to_bond\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100800a2e6a910018", @ANYRES32=r0]) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x100, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffe01}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xee}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc17}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x44) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {0x3ff}}, './file0\x00'}) r6 = syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) r7 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x2ad, 0x0, r6}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r5) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)={0x88, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x20}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x40}]}, 0x88}, 0x1, 0x0, 0x0, 0x40840}, 0x4008010) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) [ 1844.171735][ T5154] autofs4:pid:5154:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 1844.182181][ T5153] autofs4:pid:5153:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(176160769.9529902), cmd(0xc0189375) [ 1844.196590][ T5153] autofs4:pid:5153:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 00:06:17 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:17 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52"]) 00:06:17 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) connect$pppoe(r2, &(0x7f0000000600)={0x18, 0x0, {0x0, @remote, 'veth1_to_bond\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100800a2e6a910018", @ANYRES32=r0]) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x100, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffe01}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xee}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc17}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x44) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {0x3ff}}, './file0\x00'}) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:17 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0xfffffffc, 0x0, &(0x7f0000000100)=[r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0, r0]}, 0xa) (async, rerun: 32) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000240), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1844.241597][ T5160] autofs4:pid:5160:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 1844.251529][ T5165] autofs4:pid:5165:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(176160769.9529902), cmd(0xc0189375) [ 1844.265876][ T5165] autofs4:pid:5165:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 00:06:17 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332e78face95d3ae6bde45b1aa0"]) 00:06:17 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) [ 1844.311140][ T5178] autofs4:pid:5178:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(176160769.9529902), cmd(0xc0189375) [ 1844.311771][ T5177] autofs4:pid:5177:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 1844.325478][ T5178] autofs4:pid:5178:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1844.361653][ T5183] autofs4:pid:5183:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:18 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:18 executing program 2: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001f000000000000000200000038740c00000000001869000001000000000000000600000018110000", @ANYRES32=0x1, @ANYBLOB="7233000000000000b70200000000000085000000860600"/32], &(0x7f00000000c0)='syzkaller\x00', 0x81, 0x58, &(0x7f0000000100)=""/88, 0x40f00, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0x0, 0x81}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[{0x5, 0x4, 0xe, 0x6}, {0x5, 0x4, 0xf, 0xc}], 0x10, 0x3}, 0x90) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000300)=[r0, r1, r2, 0xffffffffffffffff]}, 0x4) 00:06:18 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f5254"]) 00:06:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) connect$pppoe(r2, &(0x7f0000000600)={0x18, 0x0, {0x0, @remote, 'veth1_to_bond\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100800a2e6a910018", @ANYRES32=r0]) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x100, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffe01}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xee}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc17}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x44) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:18 executing program 2: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001f000000000000000200000038740c00000000001869000001000000000000000600000018110000", @ANYRES32=0x1, @ANYBLOB="7233000000000000b70200000000000085000000860600"/32], &(0x7f00000000c0)='syzkaller\x00', 0x81, 0x58, &(0x7f0000000100)=""/88, 0x40f00, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0x0, 0x81}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[{0x5, 0x4, 0xe, 0x6}, {0x5, 0x4, 0xf, 0xc}], 0x10, 0x3}, 0x90) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000300)=[r0, r1, r2, 0xffffffffffffffff]}, 0x4) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001f000000000000000200000038740c00000000001869000001000000000000000600000018110000", @ANYRES32=0x1, @ANYBLOB="7233000000000000b70200000000000085000000860600"/32], &(0x7f00000000c0)='syzkaller\x00', 0x81, 0x58, &(0x7f0000000100)=""/88, 0x40f00, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0x0, 0x81}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[{0x5, 0x4, 0xe, 0x6}, {0x5, 0x4, 0xf, 0xc}], 0x10, 0x3}, 0x90) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000300)=[r0, r1, r2, 0xffffffffffffffff]}, 0x4) (async) 00:06:18 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f5254"]) 00:06:18 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) connect$pppoe(r2, &(0x7f0000000600)={0x18, 0x0, {0x0, @remote, 'veth1_to_bond\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100800a2e6a910018", @ANYRES32=r0]) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x100, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffe01}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xee}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc17}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x44) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) [ 1844.890529][ T5193] autofs4:pid:5193:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 1844.910685][ T5192] autofs4:pid:5192:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(176160769.9529902), cmd(0xc0189375) [ 1844.925138][ T5192] autofs4:pid:5192:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 00:06:18 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 2: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001f000000000000000200000038740c00000000001869000001000000000000000600000018110000", @ANYRES32=0x1, @ANYBLOB="7233000000000000b70200000000000085000000860600"/32], &(0x7f00000000c0)='syzkaller\x00', 0x81, 0x58, &(0x7f0000000100)=""/88, 0x40f00, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0x0, 0x81}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[{0x5, 0x4, 0xe, 0x6}, {0x5, 0x4, 0xf, 0xc}], 0x10, 0x3}, 0x90) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000300)=[r0, r1, r2, 0xffffffffffffffff]}, 0x4) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000300)=[r0, r1, r2, 0xffffffffffffffff]}, 0x4) 00:06:18 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f5254"]) 00:06:18 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) connect$pppoe(r2, &(0x7f0000000600)={0x18, 0x0, {0x0, @remote, 'veth1_to_bond\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100800a2e6a910018", @ANYRES32=r0]) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x100, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffe01}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xee}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc17}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x44) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:18 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfffffffe}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r3, 0x4, &(0x7f0000000240)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000140)="d22aad18df4289065400431adc775327229d751ace78bdce0aced636d48c1ca9a109d35c42dba4c985b22881bda1edf1833d9f9b57ecc2d88682a6d075722423b65c3164d8a2d75a3cfb4acfadda5e3725716f9e817f7100724ed4ae42f49aa7b2ca8dc78112c2a51a3d4439d714af1d11f215508c628437bf5e02af5e54cfc8cf51dde0b9ac39ff9cc5013b615e44f30ee9e27d06b2fdc9d09ee9cbee34c77e1999b74efe8959e6879a9d21bf4180097d77d08610284ef3970489430108389716082b5f81a6ffa8c4931bfd908144325d5639834652947e826413e41cfafe169b1723", 0xe3}], 0x2, 0x0, 0x0, {0x3}}) [ 1844.950130][ T5203] autofs4:pid:5203:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 1844.971243][ T5207] autofs4:pid:5207:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(176160769.9529902), cmd(0xc0189375) [ 1844.985686][ T5207] autofs4:pid:5207:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 00:06:18 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da3fb33b9a7332"]) 00:06:18 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfffffffe}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r3, 0x4, &(0x7f0000000240)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000140)="d22aad18df4289065400431adc775327229d751ace78bdce0aced636d48c1ca9a109d35c42dba4c985b22881bda1edf1833d9f9b57ecc2d88682a6d075722423b65c3164d8a2d75a3cfb4acfadda5e3725716f9e817f7100724ed4ae42f49aa7b2ca8dc78112c2a51a3d4439d714af1d11f215508c628437bf5e02af5e54cfc8cf51dde0b9ac39ff9cc5013b615e44f30ee9e27d06b2fdc9d09ee9cbee34c77e1999b74efe8959e6879a9d21bf4180097d77d08610284ef3970489430108389716082b5f81a6ffa8c4931bfd908144325d5639834652947e826413e41cfafe169b1723", 0xe3}], 0x2, 0x0, 0x0, {0x3}}) [ 1845.026338][ T5221] autofs4:pid:5221:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 1845.037913][ T5223] autofs4:pid:5223:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(176160769.9529902), cmd(0xc0189375) [ 1845.052326][ T5223] autofs4:pid:5223:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 00:06:18 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f5254"]) [ 1845.071508][ T5227] autofs4:pid:5227:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:18 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfffffffe}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r3, 0x4, &(0x7f0000000240)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000140)="d22aad18df4289065400431adc775327229d751ace78bdce0aced636d48c1ca9a109d35c42dba4c985b22881bda1edf1833d9f9b57ecc2d88682a6d075722423b65c3164d8a2d75a3cfb4acfadda5e3725716f9e817f7100724ed4ae42f49aa7b2ca8dc78112c2a51a3d4439d714af1d11f215508c628437bf5e02af5e54cfc8cf51dde0b9ac39ff9cc5013b615e44f30ee9e27d06b2fdc9d09ee9cbee34c77e1999b74efe8959e6879a9d21bf4180097d77d08610284ef3970489430108389716082b5f81a6ffa8c4931bfd908144325d5639834652947e826413e41cfafe169b1723", 0xe3}], 0x2, 0x0, 0x0, {0x3}}) 00:06:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) connect$pppoe(r2, &(0x7f0000000600)={0x18, 0x0, {0x0, @remote, 'veth1_to_bond\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100800a2e6a910018", @ANYRES32=r0]) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f5254"]) [ 1845.100226][ T5233] autofs4:pid:5233:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 1845.122921][ T5238] autofs4:pid:5238:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(176160769.9529902), cmd(0xc0189375) [ 1845.130641][ T5240] autofs4:pid:5240:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) 00:06:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f5254"]) 00:06:18 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:18 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) connect$pppoe(r2, &(0x7f0000000600)={0x18, 0x0, {0x0, @remote, 'veth1_to_bond\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100800a2e6a910018", @ANYRES32=r0]) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:18 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1845.137308][ T5238] autofs4:pid:5238:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1845.189831][ T5246] autofs4:pid:5246:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) 00:06:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3da"]) [ 1845.193373][ T5248] autofs4:pid:5248:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(176160769.9529902), cmd(0xc0189375) [ 1845.213389][ T5248] autofs4:pid:5248:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1845.229882][ T5253] autofs4:pid:5253:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:18 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) connect$pppoe(r0, &(0x7f0000000600)={0x18, 0x0, {0x0, @remote, 'veth1_to_bond\x00'}}, 0x1e) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:18 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f5254"]) 00:06:18 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:18 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:18 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f5254"]) 00:06:18 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) [ 1845.750897][ T5258] autofs4:pid:5258:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) 00:06:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f5254"]) 00:06:19 executing program 2: r0 = syz_io_uring_setup(0x7c1, &(0x7f0000000000)={0x0, 0x1bf4, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x6, &(0x7f0000000240)=[0x0, 0xffff], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f00000001c0)=""/103, 0x67}], 0x2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000005dc0)=ANY=[@ANYBLOB="0700c4e6a2e6a816f1df84ea4474fc935d60e9215fcb8924e20b6cd37ec49fcb6b44e8c09af9dd200e23fa2ad53433a8a51962d53c634a1b971dab9e259e81888c91d5e509cf6928976c2856ebef83a607a94b48a57c0b761af6eb725817111b3ba3c8bdf83d27e7802e66eccc246faf5b937d9f977914a56dcd40b5733227b1ba882185ac723e2ccbca99c52325e2ac60245717c9c7b8fecaaac7c6bec9916e9dee3a504bba5a7be31a3d771c0cbe523679897873a90bf32a8bb528c94f8b81872845b7b0366088fd5cd4ab38c7e775ffa2641afb89e2f8e3d3d9", @ANYRES16=r5, @ANYBLOB="000328bd7000fbdbdf250000000014000200776731000000000000000000000000000800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000480)={0x5, 0x0, &(0x7f0000000340)=[r4, r3, r4, r4]}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r6 = syz_io_uring_setup(0x27e1, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000006000), &(0x7f00000000c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r4) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000005fc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005f80)={&(0x7f0000005f00)={0x48, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3d5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40040) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x21, 0x0, r4, &(0x7f0000000280)={0x80, 0x20, 0x4}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r7}}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000005d00)=[{0x4, 0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/222, 0xde}, {&(0x7f0000000540)=""/5, 0x5}], &(0x7f00000007c0)=[0x7fffffff, 0x1, 0xfff, 0x100000001, 0x8]}, {0x2, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)=""/124, 0x7c}, {&(0x7f0000000880)=""/121, 0x79}], &(0x7f0000000940)=[0x6, 0x101, 0x8, 0x7, 0x8]}, {0x5, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/65, 0x41}, {&(0x7f0000000a00)=""/156, 0x9c}, {&(0x7f0000000ac0)=""/23, 0x17}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/223, 0xdf}], &(0x7f0000001c80)=[0x1]}, {0x9, 0x1, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001cc0)=""/199, 0xc7}, {&(0x7f0000001dc0)=""/177, 0xb1}, {&(0x7f0000001e80)=""/88, 0x58}, {&(0x7f0000001f00)=""/169, 0xa9}, {&(0x7f0000001fc0)=""/176, 0xb0}, {&(0x7f0000002080)=""/253, 0xfd}, {&(0x7f0000002180)=""/105, 0x69}, {&(0x7f0000002200)=""/199, 0xc7}, {&(0x7f0000002300)=""/156, 0x9c}], &(0x7f0000002480)=[0xffffffffffffff4b, 0xba]}, {0x5, 0x1, 0x0, &(0x7f0000003740)=[{&(0x7f00000024c0)=""/30, 0x1e}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/218, 0xda}, {&(0x7f0000003600)=""/244, 0xf4}, {&(0x7f0000003700)=""/8, 0x8}], &(0x7f00000037c0)=[0x1]}, {0x8, 0x1, 0x0, &(0x7f0000005c40)=[{&(0x7f0000003800)=""/103, 0x67}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/165, 0xa5}, {&(0x7f0000004940)=""/222, 0xde}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/168, 0xa8}, {&(0x7f0000005b00)=""/140, 0x8c}, {&(0x7f0000005bc0)=""/70, 0x46}], &(0x7f0000005cc0)=[0x2]}], 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b"]) 00:06:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) [ 1845.808654][ T5270] autofs4:pid:5270:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 1845.841312][ T5277] autofs4:pid:5277:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 2: r0 = syz_io_uring_setup(0x7c1, &(0x7f0000000000)={0x0, 0x1bf4, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x6, &(0x7f0000000240)=[0x0, 0xffff], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f00000001c0)=""/103, 0x67}], 0x2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000005dc0)=ANY=[@ANYBLOB="0700c4e6a2e6a816f1df84ea4474fc935d60e9215fcb8924e20b6cd37ec49fcb6b44e8c09af9dd200e23fa2ad53433a8a51962d53c634a1b971dab9e259e81888c91d5e509cf6928976c2856ebef83a607a94b48a57c0b761af6eb725817111b3ba3c8bdf83d27e7802e66eccc246faf5b937d9f977914a56dcd40b5733227b1ba882185ac723e2ccbca99c52325e2ac60245717c9c7b8fecaaac7c6bec9916e9dee3a504bba5a7be31a3d771c0cbe523679897873a90bf32a8bb528c94f8b81872845b7b0366088fd5cd4ab38c7e775ffa2641afb89e2f8e3d3d9", @ANYRES16=r5, @ANYBLOB="000328bd7000fbdbdf250000000014000200776731000000000000000000000000000800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000480)={0x5, 0x0, &(0x7f0000000340)=[r4, r3, r4, r4]}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r6 = syz_io_uring_setup(0x27e1, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000006000), &(0x7f00000000c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r4) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000005fc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005f80)={&(0x7f0000005f00)={0x48, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3d5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40040) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x21, 0x0, r4, &(0x7f0000000280)={0x80, 0x20, 0x4}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r7}}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000005d00)=[{0x4, 0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/222, 0xde}, {&(0x7f0000000540)=""/5, 0x5}], &(0x7f00000007c0)=[0x7fffffff, 0x1, 0xfff, 0x100000001, 0x8]}, {0x2, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)=""/124, 0x7c}, {&(0x7f0000000880)=""/121, 0x79}], &(0x7f0000000940)=[0x6, 0x101, 0x8, 0x7, 0x8]}, {0x5, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/65, 0x41}, {&(0x7f0000000a00)=""/156, 0x9c}, {&(0x7f0000000ac0)=""/23, 0x17}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/223, 0xdf}], &(0x7f0000001c80)=[0x1]}, {0x9, 0x1, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001cc0)=""/199, 0xc7}, {&(0x7f0000001dc0)=""/177, 0xb1}, {&(0x7f0000001e80)=""/88, 0x58}, {&(0x7f0000001f00)=""/169, 0xa9}, {&(0x7f0000001fc0)=""/176, 0xb0}, {&(0x7f0000002080)=""/253, 0xfd}, {&(0x7f0000002180)=""/105, 0x69}, {&(0x7f0000002200)=""/199, 0xc7}, {&(0x7f0000002300)=""/156, 0x9c}], &(0x7f0000002480)=[0xffffffffffffff4b, 0xba]}, {0x5, 0x1, 0x0, &(0x7f0000003740)=[{&(0x7f00000024c0)=""/30, 0x1e}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/218, 0xda}, {&(0x7f0000003600)=""/244, 0xf4}, {&(0x7f0000003700)=""/8, 0x8}], &(0x7f00000037c0)=[0x1]}, {0x8, 0x1, 0x0, &(0x7f0000005c40)=[{&(0x7f0000003800)=""/103, 0x67}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/165, 0xa5}, {&(0x7f0000004940)=""/222, 0xde}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/168, 0xa8}, {&(0x7f0000005b00)=""/140, 0x8c}, {&(0x7f0000005bc0)=""/70, 0x46}], &(0x7f0000005cc0)=[0x2]}], 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x7c1, &(0x7f0000000000)={0x0, 0x1bf4, 0x4}, &(0x7f0000000100), &(0x7f00000000c0)) (async) io_uring_setup(0x193e, &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x6, &(0x7f0000000240)=[0x0, 0xffff], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f00000001c0)=""/103, 0x67}], 0x2) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) (async) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000005dc0)=ANY=[@ANYBLOB="0700c4e6a2e6a816f1df84ea4474fc935d60e9215fcb8924e20b6cd37ec49fcb6b44e8c09af9dd200e23fa2ad53433a8a51962d53c634a1b971dab9e259e81888c91d5e509cf6928976c2856ebef83a607a94b48a57c0b761af6eb725817111b3ba3c8bdf83d27e7802e66eccc246faf5b937d9f977914a56dcd40b5733227b1ba882185ac723e2ccbca99c52325e2ac60245717c9c7b8fecaaac7c6bec9916e9dee3a504bba5a7be31a3d771c0cbe523679897873a90bf32a8bb528c94f8b81872845b7b0366088fd5cd4ab38c7e775ffa2641afb89e2f8e3d3d9", @ANYRES16=r5, @ANYBLOB="000328bd7000fbdbdf250000000014000200776731000000000000000000000000000800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000480)={0x5, 0x0, &(0x7f0000000340)=[r4, r3, r4, r4]}, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) syz_io_uring_setup(0x27e1, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000006000), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r4) (async) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000005fc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005f80)={&(0x7f0000005f00)={0x48, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3d5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40040) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x21, 0x0, r4, &(0x7f0000000280)={0x80, 0x20, 0x4}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r7}}) (async) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000005d00)=[{0x4, 0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/222, 0xde}, {&(0x7f0000000540)=""/5, 0x5}], &(0x7f00000007c0)=[0x7fffffff, 0x1, 0xfff, 0x100000001, 0x8]}, {0x2, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)=""/124, 0x7c}, {&(0x7f0000000880)=""/121, 0x79}], &(0x7f0000000940)=[0x6, 0x101, 0x8, 0x7, 0x8]}, {0x5, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/65, 0x41}, {&(0x7f0000000a00)=""/156, 0x9c}, {&(0x7f0000000ac0)=""/23, 0x17}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/223, 0xdf}], &(0x7f0000001c80)=[0x1]}, {0x9, 0x1, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001cc0)=""/199, 0xc7}, {&(0x7f0000001dc0)=""/177, 0xb1}, {&(0x7f0000001e80)=""/88, 0x58}, {&(0x7f0000001f00)=""/169, 0xa9}, {&(0x7f0000001fc0)=""/176, 0xb0}, {&(0x7f0000002080)=""/253, 0xfd}, {&(0x7f0000002180)=""/105, 0x69}, {&(0x7f0000002200)=""/199, 0xc7}, {&(0x7f0000002300)=""/156, 0x9c}], &(0x7f0000002480)=[0xffffffffffffff4b, 0xba]}, {0x5, 0x1, 0x0, &(0x7f0000003740)=[{&(0x7f00000024c0)=""/30, 0x1e}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/218, 0xda}, {&(0x7f0000003600)=""/244, 0xf4}, {&(0x7f0000003700)=""/8, 0x8}], &(0x7f00000037c0)=[0x1]}, {0x8, 0x1, 0x0, &(0x7f0000005c40)=[{&(0x7f0000003800)=""/103, 0x67}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/165, 0xa5}, {&(0x7f0000004940)=""/222, 0xde}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/168, 0xa8}, {&(0x7f0000005b00)=""/140, 0x8c}, {&(0x7f0000005bc0)=""/70, 0x46}], &(0x7f0000005cc0)=[0x2]}], 0x6) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 2: syz_io_uring_setup(0x7c1, &(0x7f0000000000)={0x0, 0x1bf4, 0x4}, &(0x7f0000000100), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x7c1, &(0x7f0000000000)={0x0, 0x1bf4, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x6, &(0x7f0000000240)=[0x0, 0xffff], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f00000001c0)=""/103, 0x67}], 0x2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000005dc0)=ANY=[@ANYBLOB="0700c4e6a2e6a816f1df84ea4474fc935d60e9215fcb8924e20b6cd37ec49fcb6b44e8c09af9dd200e23fa2ad53433a8a51962d53c634a1b971dab9e259e81888c91d5e509cf6928976c2856ebef83a607a94b48a57c0b761af6eb725817111b3ba3c8bdf83d27e7802e66eccc246faf5b937d9f977914a56dcd40b5733227b1ba882185ac723e2ccbca99c52325e2ac60245717c9c7b8fecaaac7c6bec9916e9dee3a504bba5a7be31a3d771c0cbe523679897873a90bf32a8bb528c94f8b81872845b7b0366088fd5cd4ab38c7e775ffa2641afb89e2f8e3d3d9", @ANYRES16=r5, @ANYBLOB="000328bd7000fbdbdf250000000014000200776731000000000000000000000000000800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000480)={0x5, 0x0, &(0x7f0000000340)=[r4, r3, r4, r4]}, 0x4) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000480)={0x5, 0x0, &(0x7f0000000340)=[r4, r3, r4, r4]}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r6 = syz_io_uring_setup(0x27e1, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000006000), &(0x7f00000000c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r4) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000005fc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005f80)={&(0x7f0000005f00)={0x48, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3d5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40040) (async) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000005fc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005f80)={&(0x7f0000005f00)={0x48, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3d5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40040) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x21, 0x0, r4, &(0x7f0000000280)={0x80, 0x20, 0x4}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r7}}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000005d00)=[{0x4, 0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/222, 0xde}, {&(0x7f0000000540)=""/5, 0x5}], &(0x7f00000007c0)=[0x7fffffff, 0x1, 0xfff, 0x100000001, 0x8]}, {0x2, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)=""/124, 0x7c}, {&(0x7f0000000880)=""/121, 0x79}], &(0x7f0000000940)=[0x6, 0x101, 0x8, 0x7, 0x8]}, {0x5, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/65, 0x41}, {&(0x7f0000000a00)=""/156, 0x9c}, {&(0x7f0000000ac0)=""/23, 0x17}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/223, 0xdf}], &(0x7f0000001c80)=[0x1]}, {0x9, 0x1, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001cc0)=""/199, 0xc7}, {&(0x7f0000001dc0)=""/177, 0xb1}, {&(0x7f0000001e80)=""/88, 0x58}, {&(0x7f0000001f00)=""/169, 0xa9}, {&(0x7f0000001fc0)=""/176, 0xb0}, {&(0x7f0000002080)=""/253, 0xfd}, {&(0x7f0000002180)=""/105, 0x69}, {&(0x7f0000002200)=""/199, 0xc7}, {&(0x7f0000002300)=""/156, 0x9c}], &(0x7f0000002480)=[0xffffffffffffff4b, 0xba]}, {0x5, 0x1, 0x0, &(0x7f0000003740)=[{&(0x7f00000024c0)=""/30, 0x1e}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/218, 0xda}, {&(0x7f0000003600)=""/244, 0xf4}, {&(0x7f0000003700)=""/8, 0x8}], &(0x7f00000037c0)=[0x1]}, {0x8, 0x1, 0x0, &(0x7f0000005c40)=[{&(0x7f0000003800)=""/103, 0x67}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/165, 0xa5}, {&(0x7f0000004940)=""/222, 0xde}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/168, 0xa8}, {&(0x7f0000005b00)=""/140, 0x8c}, {&(0x7f0000005bc0)=""/70, 0x46}], &(0x7f0000005cc0)=[0x2]}], 0x6) (async) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000005d00)=[{0x4, 0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/222, 0xde}, {&(0x7f0000000540)=""/5, 0x5}], &(0x7f00000007c0)=[0x7fffffff, 0x1, 0xfff, 0x100000001, 0x8]}, {0x2, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000800)=""/124, 0x7c}, {&(0x7f0000000880)=""/121, 0x79}], &(0x7f0000000940)=[0x6, 0x101, 0x8, 0x7, 0x8]}, {0x5, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/65, 0x41}, {&(0x7f0000000a00)=""/156, 0x9c}, {&(0x7f0000000ac0)=""/23, 0x17}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/223, 0xdf}], &(0x7f0000001c80)=[0x1]}, {0x9, 0x1, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001cc0)=""/199, 0xc7}, {&(0x7f0000001dc0)=""/177, 0xb1}, {&(0x7f0000001e80)=""/88, 0x58}, {&(0x7f0000001f00)=""/169, 0xa9}, {&(0x7f0000001fc0)=""/176, 0xb0}, {&(0x7f0000002080)=""/253, 0xfd}, {&(0x7f0000002180)=""/105, 0x69}, {&(0x7f0000002200)=""/199, 0xc7}, {&(0x7f0000002300)=""/156, 0x9c}], &(0x7f0000002480)=[0xffffffffffffff4b, 0xba]}, {0x5, 0x1, 0x0, &(0x7f0000003740)=[{&(0x7f00000024c0)=""/30, 0x1e}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/218, 0xda}, {&(0x7f0000003600)=""/244, 0xf4}, {&(0x7f0000003700)=""/8, 0x8}], &(0x7f00000037c0)=[0x1]}, {0x8, 0x1, 0x0, &(0x7f0000005c40)=[{&(0x7f0000003800)=""/103, 0x67}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/165, 0xa5}, {&(0x7f0000004940)=""/222, 0xde}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/168, 0xa8}, {&(0x7f0000005b00)=""/140, 0x8c}, {&(0x7f0000005bc0)=""/70, 0x46}], &(0x7f0000005cc0)=[0x2]}], 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:19 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b"]) 00:06:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) [ 1845.871934][ T5283] autofs4:pid:5283:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) 00:06:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0xffff, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/6, 0x6}], &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x20) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b"]) 00:06:19 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0ec3"]) 00:06:19 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0xffff, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/6, 0x6}], &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x20) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0xffff, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/6, 0x6}], &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x20) (async) [ 1845.942512][ T5307] autofs4:pid:5307:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 1845.979337][ T5315] autofs4:pid:5315:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x81}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0) 00:06:19 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0xffff, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/6, 0x6}], &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x20) 00:06:19 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) [ 1846.016358][ T5321] autofs4:pid:5321:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) 00:06:19 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000240)="7525b555ed269c", 0x7, 0x3}, {&(0x7f0000000440)="f560307e7ac2799323165a56d176e925a940afacdd4de92459ade766261726dfdb8b2bea24107fb9a30edf3f2a770586a14901dd63939fd9fb15ca4e70063c984238aca76e5e4742ed1e22eed70295f4c6362039865189cec5183e1e8ebd39078038636483ac5e5a03a6c58af8ff242d02b15d0e681718042a1abf6be0402705b8d111f5e2d915ebb08392c9360231ad43f09d91412a0b1d1fbe5c4fcb1ebeae67dfde3933da95912a4e2f329e021ffb07cb9d844eb877b1bf12a529d1742d0865ebf350bf59cfc85c708e060a609c6ce785fb8caafae308ac25b41e83ee62b1f62fb703161594a2024a9bdd986a", 0xee, 0x1}, {&(0x7f0000000280)="a8e0cc973742f559c5c672235a64db90a10f0e9d8c56a2", 0x17}, {&(0x7f00000002c0)="6e3ab206c64a8796fab092587027a8a032e9096dbd2b21401f717ff9501f276c009898faf5e847ef82162a8608fe498b72711a2962ddc27a262406f880a1a1a7940b5a2d1fbd371e2d4636728415a497a19a7455978c87e94f1c649ce08c0e0f79b348b9260a532da030ccefcf4f0249bbc10514bb04cac76c567e427e", 0x7d}, {&(0x7f0000000540)="92e156d377f0d1c3dfc3fb4fba31471ed260d9568dd0095868ee5748c455c41e86545bcf8cdcf2f36650001ab037457f7002c834ae64cc8f8c8119a7690a6e5d56bbf16153a733a6e46a74701e8022ea1547", 0x52}, {&(0x7f0000000600)="b57106fa1ded2b3891d65ce92bdf12c2946bc2048bb8dfb79be0e68faade0cefcc967e5c51b8133443253eed919a010aadfa9e14c92dc926c2efc6fa57312f6c98212af1177c849d3be5dc6d0b5aa200224cfc5e6ca5d80450237ef58f2f92f2e94150d223aba49ec87214c5b701eaddd016446777cdd923835ca96f527f07c08b7c", 0x82, 0x3}, {&(0x7f00000006c0)="eeb8ddbfbeacab9d2e7e945f8fa94b181409310b515347027413c4dc89", 0x1d, 0x2}]}, 0x7, 0x3}, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 2: r0 = io_uring_setup(0x2e01, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000003c0)={0x2, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f0000000380)}, 0x20) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000500)={0xcf, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/218, 0xda}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000400)=""/198, 0xc6}], &(0x7f0000000380)=[0x9, 0x7fffffffffffffff], 0x4}, 0x20) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r2 = io_uring_setup(0x59c5, &(0x7f0000000540)={0x0, 0xed07, 0x0, 0x2, 0x109, 0x0, r0}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000001780)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x30) 00:06:19 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0e"]) 00:06:19 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 2: r0 = io_uring_setup(0x2e01, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000003c0)={0x2, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f0000000380)}, 0x20) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000500)={0xcf, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/218, 0xda}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000400)=""/198, 0xc6}], &(0x7f0000000380)=[0x9, 0x7fffffffffffffff], 0x4}, 0x20) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) (async) r2 = io_uring_setup(0x59c5, &(0x7f0000000540)={0x0, 0xed07, 0x0, 0x2, 0x109, 0x0, r0}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000001780)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x30) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:19 executing program 2: r0 = io_uring_setup(0x2e01, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000003c0)={0x2, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f0000000380)}, 0x20) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000500)={0xcf, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/218, 0xda}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000400)=""/198, 0xc6}], &(0x7f0000000380)=[0x9, 0x7fffffffffffffff], 0x4}, 0x20) (async, rerun: 64) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) (async, rerun: 64) r2 = io_uring_setup(0x59c5, &(0x7f0000000540)={0x0, 0xed07, 0x0, 0x2, 0x109, 0x0, r0}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000001780)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x30) 00:06:19 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0e"]) [ 1846.637894][ T5347] autofs4:pid:5347:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) 00:06:19 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:19 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000003800000067a6c010f1f58cef382f04262a22bcdc23467d7b7e5e55d630183a9671d4ce95832a30ab8f52541a077b0e"]) 00:06:19 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000200)) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x8, 0x400, 0x4, 0x0, 0x7c4]}, &(0x7f0000000180)=0x54) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1846.683262][ T5359] autofs4:pid:5359:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) 00:06:19 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:19 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000200)) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x8, 0x400, 0x4, 0x0, 0x7c4]}, &(0x7f0000000180)=0x54) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:19 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:19 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) [ 1846.725592][ T5370] autofs4:pid:5370:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) 00:06:19 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000200)) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x8, 0x400, 0x4, 0x0, 0x7c4]}, &(0x7f0000000180)=0x54) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000200)) (async) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x8, 0x400, 0x4, 0x0, 0x7c4]}, &(0x7f0000000180)=0x54) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:19 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:19 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:20 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xf9b, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:20 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:20 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x28f}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x22f, &(0x7f0000000100)={0x0, 0xa4ff, 0x800, 0x0, 0x207, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003140)=[{0x2, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/7, 0x7}], &(0x7f00000002c0)=[0x5, 0x6]}, {0x2, 0x1, 0x0, &(0x7f0000000400)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000300)=""/204, 0xcc}], &(0x7f0000000440)=[0x401, 0x10001, 0x8]}, {0x4, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000001600)=""/242, 0xf2}], &(0x7f0000000580)=[0x5]}, {0x8, 0x1, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001700)=""/120, 0x78}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000017c0)=""/13, 0xd}, {&(0x7f0000001800)=""/16, 0x10}, {&(0x7f0000001840)=""/216, 0xd8}, {&(0x7f0000000480)=""/58, 0x3a}, {&(0x7f0000001980)=""/26, 0x1a}, {&(0x7f00000019c0)=""/102, 0x66}], &(0x7f0000001ac0)=[0xaa8, 0x1, 0x7, 0x4, 0x5, 0xa8c2, 0x1, 0xfe, 0x2, 0x8]}, {0x4, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001b40)=""/236, 0xec}, {&(0x7f0000001c40)=""/90, 0x5a}, {&(0x7f0000001cc0)=""/119, 0x77}, {&(0x7f0000001d40)=""/20, 0x14}], &(0x7f0000001dc0)=[0x4, 0x1, 0x8001, 0x9a5, 0x7800000000000000, 0x9, 0x1, 0x400]}, {0x5, 0x1, 0x0, &(0x7f0000003080)=[{&(0x7f0000001e00)=""/117, 0x75}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/13, 0xd}, {&(0x7f0000002ec0)=""/247, 0xf7}, {&(0x7f0000002fc0)=""/180, 0xb4}], &(0x7f0000003100)=[0x7ff, 0x4fe]}], 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:20 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) syz_io_uring_setup(0xe5a, &(0x7f0000000140)={0x0, 0x3d6b, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) r3 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:20 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:20 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:20 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x28f}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x22f, &(0x7f0000000100)={0x0, 0xa4ff, 0x800, 0x0, 0x207, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003140)=[{0x2, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/7, 0x7}], &(0x7f00000002c0)=[0x5, 0x6]}, {0x2, 0x1, 0x0, &(0x7f0000000400)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000300)=""/204, 0xcc}], &(0x7f0000000440)=[0x401, 0x10001, 0x8]}, {0x4, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000001600)=""/242, 0xf2}], &(0x7f0000000580)=[0x5]}, {0x8, 0x1, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001700)=""/120, 0x78}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000017c0)=""/13, 0xd}, {&(0x7f0000001800)=""/16, 0x10}, {&(0x7f0000001840)=""/216, 0xd8}, {&(0x7f0000000480)=""/58, 0x3a}, {&(0x7f0000001980)=""/26, 0x1a}, {&(0x7f00000019c0)=""/102, 0x66}], &(0x7f0000001ac0)=[0xaa8, 0x1, 0x7, 0x4, 0x5, 0xa8c2, 0x1, 0xfe, 0x2, 0x8]}, {0x4, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001b40)=""/236, 0xec}, {&(0x7f0000001c40)=""/90, 0x5a}, {&(0x7f0000001cc0)=""/119, 0x77}, {&(0x7f0000001d40)=""/20, 0x14}], &(0x7f0000001dc0)=[0x4, 0x1, 0x8001, 0x9a5, 0x7800000000000000, 0x9, 0x1, 0x400]}, {0x5, 0x1, 0x0, &(0x7f0000003080)=[{&(0x7f0000001e00)=""/117, 0x75}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/13, 0xd}, {&(0x7f0000002ec0)=""/247, 0xf7}, {&(0x7f0000002fc0)=""/180, 0xb4}], &(0x7f0000003100)=[0x7ff, 0x4fe]}], 0x6) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:20 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 00:06:20 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:20 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x28f}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x22f, &(0x7f0000000100)={0x0, 0xa4ff, 0x800, 0x0, 0x207, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003140)=[{0x2, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/7, 0x7}], &(0x7f00000002c0)=[0x5, 0x6]}, {0x2, 0x1, 0x0, &(0x7f0000000400)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000300)=""/204, 0xcc}], &(0x7f0000000440)=[0x401, 0x10001, 0x8]}, {0x4, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000001600)=""/242, 0xf2}], &(0x7f0000000580)=[0x5]}, {0x8, 0x1, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001700)=""/120, 0x78}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000017c0)=""/13, 0xd}, {&(0x7f0000001800)=""/16, 0x10}, {&(0x7f0000001840)=""/216, 0xd8}, {&(0x7f0000000480)=""/58, 0x3a}, {&(0x7f0000001980)=""/26, 0x1a}, {&(0x7f00000019c0)=""/102, 0x66}], &(0x7f0000001ac0)=[0xaa8, 0x1, 0x7, 0x4, 0x5, 0xa8c2, 0x1, 0xfe, 0x2, 0x8]}, {0x4, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001b40)=""/236, 0xec}, {&(0x7f0000001c40)=""/90, 0x5a}, {&(0x7f0000001cc0)=""/119, 0x77}, {&(0x7f0000001d40)=""/20, 0x14}], &(0x7f0000001dc0)=[0x4, 0x1, 0x8001, 0x9a5, 0x7800000000000000, 0x9, 0x1, 0x400]}, {0x5, 0x1, 0x0, &(0x7f0000003080)=[{&(0x7f0000001e00)=""/117, 0x75}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/13, 0xd}, {&(0x7f0000002ec0)=""/247, 0xf7}, {&(0x7f0000002fc0)=""/180, 0xb4}], &(0x7f0000003100)=[0x7ff, 0x4fe]}], 0x6) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:20 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:20 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffdfff, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:20 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000100), 0x8, 0x40000) ioctl$RTC_WIE_ON(r0, 0x700f) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) 00:06:20 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x91}, &(0x7f00000001c0), &(0x7f0000000200)) 00:06:20 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) 00:06:20 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000100), 0x8, 0x40000) ioctl$RTC_WIE_ON(r0, 0x700f) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) socket$inet_tcp(0x2, 0x1, 0x0) 00:06:20 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140), 0x0, &(0x7f0000000200)) 00:06:20 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140), 0x0, &(0x7f0000000200)) 00:06:20 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000100), 0x8, 0x40000) ioctl$RTC_WIE_ON(r0, 0x700f) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$RTC_PIE_OFF(r0, 0x7006) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) socket$inet_tcp(0x2, 0x1, 0x0) 00:06:20 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x177}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:20 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140), 0x0, &(0x7f0000000200)) 00:06:20 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:20 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140), &(0x7f00000001c0), 0x0) 00:06:21 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) r3 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:21 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr, {[@timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x177}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:21 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140), &(0x7f00000001c0), 0x0) 00:06:21 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x2007f2a, &(0x7f0000000140), &(0x7f00000001c0), 0x0) 00:06:21 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x177}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:21 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r3 = io_uring_setup(0x2e01, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000003c0)={0x2, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f0000000380)=[0x0]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x6, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000000240)=""/23, 0x17}], &(0x7f00000002c0)=[0x3f, 0x3ff, 0x5], 0x2}, 0x20) 00:06:21 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000001640)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000500)={0x20000, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000280)=""/222, 0xde}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f00000004c0)=[0x1, 0x5, 0x5, 0x800], 0x5}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001600)={0x9, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0xffffffffffff444e, 0xff, 0x6, 0x401]}, 0x20) 00:06:21 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r3 = io_uring_setup(0x2e01, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000003c0)={0x2, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f0000000380)=[0x0]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x6, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000000240)=""/23, 0x17}], &(0x7f00000002c0)=[0x3f, 0x3ff, 0x5], 0x2}, 0x20) 00:06:21 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 2: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000001640)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000500)={0x20000, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000280)=""/222, 0xde}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f00000004c0)=[0x1, 0x5, 0x5, 0x800], 0x5}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001600)={0x9, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0xffffffffffff444e, 0xff, 0x6, 0x401]}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001600)={0x9, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0xffffffffffff444e, 0xff, 0x6, 0x401]}, 0x20) 00:06:21 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r3 = io_uring_setup(0x2e01, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000003c0)={0x2, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f0000000380)=[0x0]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x6, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000000240)=""/23, 0x17}], &(0x7f00000002c0)=[0x3f, 0x3ff, 0x5], 0x2}, 0x20) 00:06:21 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000001640)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000500)={0x20000, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000280)=""/222, 0xde}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f00000004c0)=[0x1, 0x5, 0x5, 0x800], 0x5}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001600)={0x9, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0xffffffffffff444e, 0xff, 0x6, 0x401]}, 0x20) 00:06:21 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) socket(0x1, 0x0, 0x5) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:21 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:21 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:22 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) recvmsg$can_raw(r1, &(0x7f0000000e40)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/197, 0xc5}], 0x5, &(0x7f0000000e00)=""/30, 0x1e}, 0x140) r2 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:22 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}, 0x3}}}}}}}, 0x0) 00:06:22 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:22 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) socket(0x1, 0x0, 0x5) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) (async) socket(0x1, 0x0, 0x5) (async) ioctl$RTC_WIE_OFF(r0, 0x7010) (async) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:22 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4ea3, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:22 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0) 00:06:22 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4e21}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:22 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) (async) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) socket(0x1, 0x0, 0x5) ioctl$RTC_WIE_OFF(r0, 0x7010) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:22 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r1 = syz_io_uring_setup(0x37d2, &(0x7f0000000100)={0x0, 0x3621, 0x1000, 0x1, 0x4c}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:22 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:22 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x1, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:22 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x1}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:22 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffffffffffff06}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x682b, &(0x7f0000000100)={0x0, 0xf326, 0xaa275de179a61f0c, 0x1, 0x389, 0x0, r0}, &(0x7f00000047c0), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000004700)=[{0x3, 0x1, 0x0, &(0x7f0000001740)=[{&(0x7f00000017c0)=""/90, 0x5a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/196, 0xc4}], &(0x7f0000002940)=[0xaa, 0x9, 0x7, 0x1]}, {0x2, 0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002980)=""/142, 0x8e}, {&(0x7f0000002a40)=""/130, 0x82}], &(0x7f0000002b40)=[0x401, 0x4, 0x80d8, 0x627, 0xbc3a, 0x8, 0x924e]}, {0x3, 0x1, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/134, 0x86}, {&(0x7f0000002c40)=""/149, 0x95}, {&(0x7f0000002d00)=""/4, 0x4}], &(0x7f0000002d80)=[0x2, 0x8, 0x9]}, {0x6, 0x1, 0x0, &(0x7f0000004100)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/250, 0xfa}, {&(0x7f0000003ec0)=""/195, 0xc3}, {&(0x7f0000003fc0)=""/10, 0xa}, {&(0x7f0000004000)=""/174, 0xae}, {&(0x7f00000040c0)=""/12, 0xc}], &(0x7f0000004180)=[0x3, 0xff, 0x81, 0x7fffffff, 0x3, 0x1, 0xffffffffffffd7f3, 0x2]}, {0x7, 0x1, 0x0, &(0x7f0000004640)=[{&(0x7f00000041c0)=""/9, 0x9}, {&(0x7f0000004200)=""/79, 0x4f}, {&(0x7f0000004280)=""/82, 0x52}, {&(0x7f0000004300)=""/231, 0xe7}, {&(0x7f0000004400)=""/171, 0xab}, {&(0x7f00000044c0)=""/176, 0xb0}, {&(0x7f0000004580)=""/165, 0xa5}], &(0x7f00000046c0)=[0x4, 0x8000000000000000, 0x8001, 0x81, 0x89d, 0x81, 0xffffffffffffffff, 0xffffffff]}], 0x5) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000001780)={0x6, 0x1, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f00000003c0)=""/237, 0xed}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}], &(0x7f0000001740)}, 0x20) 00:06:22 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r1 = syz_io_uring_setup(0x37d2, &(0x7f0000000100)={0x0, 0x3621, 0x1000, 0x1, 0x4c}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:22 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:22 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x4}, 0x3}}}}}}}, 0x0) 00:06:22 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r1 = syz_io_uring_setup(0x37d2, &(0x7f0000000100)={0x0, 0x3621, 0x1000, 0x1, 0x4c}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:22 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffffffffffff06}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x682b, &(0x7f0000000100)={0x0, 0xf326, 0xaa275de179a61f0c, 0x1, 0x389, 0x0, r0}, &(0x7f00000047c0), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000004700)=[{0x3, 0x1, 0x0, &(0x7f0000001740)=[{&(0x7f00000017c0)=""/90, 0x5a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/196, 0xc4}], &(0x7f0000002940)=[0xaa, 0x9, 0x7, 0x1]}, {0x2, 0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002980)=""/142, 0x8e}, {&(0x7f0000002a40)=""/130, 0x82}], &(0x7f0000002b40)=[0x401, 0x4, 0x80d8, 0x627, 0xbc3a, 0x8, 0x924e]}, {0x3, 0x1, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/134, 0x86}, {&(0x7f0000002c40)=""/149, 0x95}, {&(0x7f0000002d00)=""/4, 0x4}], &(0x7f0000002d80)=[0x2, 0x8, 0x9]}, {0x6, 0x1, 0x0, &(0x7f0000004100)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/250, 0xfa}, {&(0x7f0000003ec0)=""/195, 0xc3}, {&(0x7f0000003fc0)=""/10, 0xa}, {&(0x7f0000004000)=""/174, 0xae}, {&(0x7f00000040c0)=""/12, 0xc}], &(0x7f0000004180)=[0x3, 0xff, 0x81, 0x7fffffff, 0x3, 0x1, 0xffffffffffffd7f3, 0x2]}, {0x7, 0x1, 0x0, &(0x7f0000004640)=[{&(0x7f00000041c0)=""/9, 0x9}, {&(0x7f0000004200)=""/79, 0x4f}, {&(0x7f0000004280)=""/82, 0x52}, {&(0x7f0000004300)=""/231, 0xe7}, {&(0x7f0000004400)=""/171, 0xab}, {&(0x7f00000044c0)=""/176, 0xb0}, {&(0x7f0000004580)=""/165, 0xa5}], &(0x7f00000046c0)=[0x4, 0x8000000000000000, 0x8001, 0x81, 0x89d, 0x81, 0xffffffffffffffff, 0xffffffff]}], 0x5) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000001780)={0x6, 0x1, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f00000003c0)=""/237, 0xed}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}], &(0x7f0000001740)}, 0x20) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffffffffffff06}, {0x0}], 0x2) (async) syz_io_uring_setup(0x682b, &(0x7f0000000100)={0x0, 0xf326, 0xaa275de179a61f0c, 0x1, 0x389, 0x0, r0}, &(0x7f00000047c0), &(0x7f00000001c0)) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000004700)=[{0x3, 0x1, 0x0, &(0x7f0000001740)=[{&(0x7f00000017c0)=""/90, 0x5a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/196, 0xc4}], &(0x7f0000002940)=[0xaa, 0x9, 0x7, 0x1]}, {0x2, 0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002980)=""/142, 0x8e}, {&(0x7f0000002a40)=""/130, 0x82}], &(0x7f0000002b40)=[0x401, 0x4, 0x80d8, 0x627, 0xbc3a, 0x8, 0x924e]}, {0x3, 0x1, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/134, 0x86}, {&(0x7f0000002c40)=""/149, 0x95}, {&(0x7f0000002d00)=""/4, 0x4}], &(0x7f0000002d80)=[0x2, 0x8, 0x9]}, {0x6, 0x1, 0x0, &(0x7f0000004100)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/250, 0xfa}, {&(0x7f0000003ec0)=""/195, 0xc3}, {&(0x7f0000003fc0)=""/10, 0xa}, {&(0x7f0000004000)=""/174, 0xae}, {&(0x7f00000040c0)=""/12, 0xc}], &(0x7f0000004180)=[0x3, 0xff, 0x81, 0x7fffffff, 0x3, 0x1, 0xffffffffffffd7f3, 0x2]}, {0x7, 0x1, 0x0, &(0x7f0000004640)=[{&(0x7f00000041c0)=""/9, 0x9}, {&(0x7f0000004200)=""/79, 0x4f}, {&(0x7f0000004280)=""/82, 0x52}, {&(0x7f0000004300)=""/231, 0xe7}, {&(0x7f0000004400)=""/171, 0xab}, {&(0x7f00000044c0)=""/176, 0xb0}, {&(0x7f0000004580)=""/165, 0xa5}], &(0x7f00000046c0)=[0x4, 0x8000000000000000, 0x8001, 0x81, 0x89d, 0x81, 0xffffffffffffffff, 0xffffffff]}], 0x5) (async) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000001780)={0x6, 0x1, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f00000003c0)=""/237, 0xed}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}], &(0x7f0000001740)}, 0x20) (async) 00:06:22 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:22 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffffffffffff06}, {0x0}], 0x2) (async) r1 = syz_io_uring_setup(0x682b, &(0x7f0000000100)={0x0, 0xf326, 0xaa275de179a61f0c, 0x1, 0x389, 0x0, r0}, &(0x7f00000047c0), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000004700)=[{0x3, 0x1, 0x0, &(0x7f0000001740)=[{&(0x7f00000017c0)=""/90, 0x5a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/196, 0xc4}], &(0x7f0000002940)=[0xaa, 0x9, 0x7, 0x1]}, {0x2, 0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002980)=""/142, 0x8e}, {&(0x7f0000002a40)=""/130, 0x82}], &(0x7f0000002b40)=[0x401, 0x4, 0x80d8, 0x627, 0xbc3a, 0x8, 0x924e]}, {0x3, 0x1, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/134, 0x86}, {&(0x7f0000002c40)=""/149, 0x95}, {&(0x7f0000002d00)=""/4, 0x4}], &(0x7f0000002d80)=[0x2, 0x8, 0x9]}, {0x6, 0x1, 0x0, &(0x7f0000004100)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/250, 0xfa}, {&(0x7f0000003ec0)=""/195, 0xc3}, {&(0x7f0000003fc0)=""/10, 0xa}, {&(0x7f0000004000)=""/174, 0xae}, {&(0x7f00000040c0)=""/12, 0xc}], &(0x7f0000004180)=[0x3, 0xff, 0x81, 0x7fffffff, 0x3, 0x1, 0xffffffffffffd7f3, 0x2]}, {0x7, 0x1, 0x0, &(0x7f0000004640)=[{&(0x7f00000041c0)=""/9, 0x9}, {&(0x7f0000004200)=""/79, 0x4f}, {&(0x7f0000004280)=""/82, 0x52}, {&(0x7f0000004300)=""/231, 0xe7}, {&(0x7f0000004400)=""/171, 0xab}, {&(0x7f00000044c0)=""/176, 0xb0}, {&(0x7f0000004580)=""/165, 0xa5}], &(0x7f00000046c0)=[0x4, 0x8000000000000000, 0x8001, 0x81, 0x89d, 0x81, 0xffffffffffffffff, 0xffffffff]}], 0x5) (async) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000001780)={0x6, 0x1, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f00000003c0)=""/237, 0xed}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}], &(0x7f0000001740)}, 0x20) 00:06:22 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) syz_io_uring_setup(0x37d2, &(0x7f0000000100)={0x0, 0x3621, 0x1000, 0x1, 0x4c}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:22 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}, 0x3}}}}}}}, 0x0) 00:06:22 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0) 00:06:22 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:22 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x6, 0xe00000], 0x2) 00:06:22 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:22 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:22 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x6, 0xe00000], 0x2) 00:06:22 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:22 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:22 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:22 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x6, 0xe00000], 0x2) 00:06:23 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:23 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:23 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000059c0)=[{0x9, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000140)=""/211, 0xd3}, {&(0x7f0000000240)=""/72, 0x48}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f00000004c0)=""/179, 0xb3}], &(0x7f00000006c0)=[0x10000, 0x7, 0x35, 0x180000000, 0x3, 0x800, 0x7, 0x4, 0x5e]}, {0x8, 0x1, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/178, 0xb2}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000019c0)=""/8, 0x8}, {&(0x7f0000001a00)=""/96, 0x60}, {&(0x7f0000001a80)=""/79, 0x4f}], &(0x7f0000001b80)=[0x6, 0x5]}, {0x5, 0x1, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001bc0)=""/91, 0x5b}, {&(0x7f0000001c40)=""/133, 0x85}, {&(0x7f0000001d00)=""/188, 0xbc}, {&(0x7f0000001dc0)=""/115, 0x73}, {&(0x7f0000001e40)=""/184, 0xb8}], &(0x7f0000001f80)=[0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffb]}, {0x2, 0x1, 0x0, &(0x7f0000003000)=[{&(0x7f0000001fc0)=""/56, 0x38}, {&(0x7f0000002000)=""/4096, 0x1000}], &(0x7f0000003040)=[0x0, 0x4, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x0]}, {0x3, 0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003080)=""/133, 0x85}, {&(0x7f0000003140)=""/126, 0x7e}, {&(0x7f00000031c0)=""/71, 0x47}], &(0x7f0000003280)=[0xfca7, 0x2, 0x0, 0xf7b6, 0x8000, 0x0]}, {0xa, 0x1, 0x0, &(0x7f00000057c0)=[{&(0x7f00000032c0)=""/195, 0xc3}, {&(0x7f00000033c0)=""/2, 0x2}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/157, 0x9d}, {&(0x7f00000044c0)=""/59, 0x3b}, {&(0x7f0000004500)=""/153, 0x99}, {&(0x7f00000045c0)=""/121, 0x79}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/169, 0xa9}, {&(0x7f0000005700)=""/153, 0x99}], &(0x7f0000005880)=[0x0, 0xa5, 0x200, 0x69532620, 0x60, 0x6, 0x8805, 0xff]}, {0x1, 0x1, 0x0, &(0x7f0000005940)=[{&(0x7f00000058c0)=""/113, 0x71}], &(0x7f0000005980)=[0x7, 0xfffffffffffffff9, 0xb967, 0xee, 0x5, 0x5, 0x8, 0x90]}], 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:23 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) r2 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:23 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:23 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:23 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:23 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000059c0)=[{0x9, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000140)=""/211, 0xd3}, {&(0x7f0000000240)=""/72, 0x48}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f00000004c0)=""/179, 0xb3}], &(0x7f00000006c0)=[0x10000, 0x7, 0x35, 0x180000000, 0x3, 0x800, 0x7, 0x4, 0x5e]}, {0x8, 0x1, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/178, 0xb2}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000019c0)=""/8, 0x8}, {&(0x7f0000001a00)=""/96, 0x60}, {&(0x7f0000001a80)=""/79, 0x4f}], &(0x7f0000001b80)=[0x6, 0x5]}, {0x5, 0x1, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001bc0)=""/91, 0x5b}, {&(0x7f0000001c40)=""/133, 0x85}, {&(0x7f0000001d00)=""/188, 0xbc}, {&(0x7f0000001dc0)=""/115, 0x73}, {&(0x7f0000001e40)=""/184, 0xb8}], &(0x7f0000001f80)=[0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffb]}, {0x2, 0x1, 0x0, &(0x7f0000003000)=[{&(0x7f0000001fc0)=""/56, 0x38}, {&(0x7f0000002000)=""/4096, 0x1000}], &(0x7f0000003040)=[0x0, 0x4, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x0]}, {0x3, 0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003080)=""/133, 0x85}, {&(0x7f0000003140)=""/126, 0x7e}, {&(0x7f00000031c0)=""/71, 0x47}], &(0x7f0000003280)=[0xfca7, 0x2, 0x0, 0xf7b6, 0x8000, 0x0]}, {0xa, 0x1, 0x0, &(0x7f00000057c0)=[{&(0x7f00000032c0)=""/195, 0xc3}, {&(0x7f00000033c0)=""/2, 0x2}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/157, 0x9d}, {&(0x7f00000044c0)=""/59, 0x3b}, {&(0x7f0000004500)=""/153, 0x99}, {&(0x7f00000045c0)=""/121, 0x79}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/169, 0xa9}, {&(0x7f0000005700)=""/153, 0x99}], &(0x7f0000005880)=[0x0, 0xa5, 0x200, 0x69532620, 0x60, 0x6, 0x8805, 0xff]}, {0x1, 0x1, 0x0, &(0x7f0000005940)=[{&(0x7f00000058c0)=""/113, 0x71}], &(0x7f0000005980)=[0x7, 0xfffffffffffffff9, 0xb967, 0xee, 0x5, 0x5, 0x8, 0x90]}], 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000059c0)=[{0x9, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000140)=""/211, 0xd3}, {&(0x7f0000000240)=""/72, 0x48}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f00000004c0)=""/179, 0xb3}], &(0x7f00000006c0)=[0x10000, 0x7, 0x35, 0x180000000, 0x3, 0x800, 0x7, 0x4, 0x5e]}, {0x8, 0x1, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/178, 0xb2}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000019c0)=""/8, 0x8}, {&(0x7f0000001a00)=""/96, 0x60}, {&(0x7f0000001a80)=""/79, 0x4f}], &(0x7f0000001b80)=[0x6, 0x5]}, {0x5, 0x1, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001bc0)=""/91, 0x5b}, {&(0x7f0000001c40)=""/133, 0x85}, {&(0x7f0000001d00)=""/188, 0xbc}, {&(0x7f0000001dc0)=""/115, 0x73}, {&(0x7f0000001e40)=""/184, 0xb8}], &(0x7f0000001f80)=[0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffb]}, {0x2, 0x1, 0x0, &(0x7f0000003000)=[{&(0x7f0000001fc0)=""/56, 0x38}, {&(0x7f0000002000)=""/4096, 0x1000}], &(0x7f0000003040)=[0x0, 0x4, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x0]}, {0x3, 0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003080)=""/133, 0x85}, {&(0x7f0000003140)=""/126, 0x7e}, {&(0x7f00000031c0)=""/71, 0x47}], &(0x7f0000003280)=[0xfca7, 0x2, 0x0, 0xf7b6, 0x8000, 0x0]}, {0xa, 0x1, 0x0, &(0x7f00000057c0)=[{&(0x7f00000032c0)=""/195, 0xc3}, {&(0x7f00000033c0)=""/2, 0x2}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/157, 0x9d}, {&(0x7f00000044c0)=""/59, 0x3b}, {&(0x7f0000004500)=""/153, 0x99}, {&(0x7f00000045c0)=""/121, 0x79}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/169, 0xa9}, {&(0x7f0000005700)=""/153, 0x99}], &(0x7f0000005880)=[0x0, 0xa5, 0x200, 0x69532620, 0x60, 0x6, 0x8805, 0xff]}, {0x1, 0x1, 0x0, &(0x7f0000005940)=[{&(0x7f00000058c0)=""/113, 0x71}], &(0x7f0000005980)=[0x7, 0xfffffffffffffff9, 0xb967, 0xee, 0x5, 0x5, 0x8, 0x90]}], 0x7) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:23 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:23 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:23 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) 00:06:23 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:23 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:23 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000059c0)=[{0x9, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000140)=""/211, 0xd3}, {&(0x7f0000000240)=""/72, 0x48}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f00000004c0)=""/179, 0xb3}], &(0x7f00000006c0)=[0x10000, 0x7, 0x35, 0x180000000, 0x3, 0x800, 0x7, 0x4, 0x5e]}, {0x8, 0x1, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/178, 0xb2}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000019c0)=""/8, 0x8}, {&(0x7f0000001a00)=""/96, 0x60}, {&(0x7f0000001a80)=""/79, 0x4f}], &(0x7f0000001b80)=[0x6, 0x5]}, {0x5, 0x1, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001bc0)=""/91, 0x5b}, {&(0x7f0000001c40)=""/133, 0x85}, {&(0x7f0000001d00)=""/188, 0xbc}, {&(0x7f0000001dc0)=""/115, 0x73}, {&(0x7f0000001e40)=""/184, 0xb8}], &(0x7f0000001f80)=[0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffb]}, {0x2, 0x1, 0x0, &(0x7f0000003000)=[{&(0x7f0000001fc0)=""/56, 0x38}, {&(0x7f0000002000)=""/4096, 0x1000}], &(0x7f0000003040)=[0x0, 0x4, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x0]}, {0x3, 0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003080)=""/133, 0x85}, {&(0x7f0000003140)=""/126, 0x7e}, {&(0x7f00000031c0)=""/71, 0x47}], &(0x7f0000003280)=[0xfca7, 0x2, 0x0, 0xf7b6, 0x8000, 0x0]}, {0xa, 0x1, 0x0, &(0x7f00000057c0)=[{&(0x7f00000032c0)=""/195, 0xc3}, {&(0x7f00000033c0)=""/2, 0x2}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/157, 0x9d}, {&(0x7f00000044c0)=""/59, 0x3b}, {&(0x7f0000004500)=""/153, 0x99}, {&(0x7f00000045c0)=""/121, 0x79}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/169, 0xa9}, {&(0x7f0000005700)=""/153, 0x99}], &(0x7f0000005880)=[0x0, 0xa5, 0x200, 0x69532620, 0x60, 0x6, 0x8805, 0xff]}, {0x1, 0x1, 0x0, &(0x7f0000005940)=[{&(0x7f00000058c0)=""/113, 0x71}], &(0x7f0000005980)=[0x7, 0xfffffffffffffff9, 0xb967, 0xee, 0x5, 0x5, 0x8, 0x90]}], 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000059c0)=[{0x9, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000140)=""/211, 0xd3}, {&(0x7f0000000240)=""/72, 0x48}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f00000004c0)=""/179, 0xb3}], &(0x7f00000006c0)=[0x10000, 0x7, 0x35, 0x180000000, 0x3, 0x800, 0x7, 0x4, 0x5e]}, {0x8, 0x1, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/178, 0xb2}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000019c0)=""/8, 0x8}, {&(0x7f0000001a00)=""/96, 0x60}, {&(0x7f0000001a80)=""/79, 0x4f}], &(0x7f0000001b80)=[0x6, 0x5]}, {0x5, 0x1, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001bc0)=""/91, 0x5b}, {&(0x7f0000001c40)=""/133, 0x85}, {&(0x7f0000001d00)=""/188, 0xbc}, {&(0x7f0000001dc0)=""/115, 0x73}, {&(0x7f0000001e40)=""/184, 0xb8}], &(0x7f0000001f80)=[0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffb]}, {0x2, 0x1, 0x0, &(0x7f0000003000)=[{&(0x7f0000001fc0)=""/56, 0x38}, {&(0x7f0000002000)=""/4096, 0x1000}], &(0x7f0000003040)=[0x0, 0x4, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x0]}, {0x3, 0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003080)=""/133, 0x85}, {&(0x7f0000003140)=""/126, 0x7e}, {&(0x7f00000031c0)=""/71, 0x47}], &(0x7f0000003280)=[0xfca7, 0x2, 0x0, 0xf7b6, 0x8000, 0x0]}, {0xa, 0x1, 0x0, &(0x7f00000057c0)=[{&(0x7f00000032c0)=""/195, 0xc3}, {&(0x7f00000033c0)=""/2, 0x2}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/157, 0x9d}, {&(0x7f00000044c0)=""/59, 0x3b}, {&(0x7f0000004500)=""/153, 0x99}, {&(0x7f00000045c0)=""/121, 0x79}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/169, 0xa9}, {&(0x7f0000005700)=""/153, 0x99}], &(0x7f0000005880)=[0x0, 0xa5, 0x200, 0x69532620, 0x60, 0x6, 0x8805, 0xff]}, {0x1, 0x1, 0x0, &(0x7f0000005940)=[{&(0x7f00000058c0)=""/113, 0x71}], &(0x7f0000005980)=[0x7, 0xfffffffffffffff9, 0xb967, 0xee, 0x5, 0x5, 0x8, 0x90]}], 0x7) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:23 executing program 1: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x13, 0x0, 0x0) 00:06:23 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:23 executing program 4: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 00:06:23 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:23 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (fail_nth: 1) 00:06:23 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:23 executing program 4: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 00:06:23 executing program 0: r0 = syz_io_uring_setup(0x2af9, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:23 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:23 executing program 0: r0 = syz_io_uring_setup(0x2af9, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:23 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1850.192231][ T5675] FAULT_INJECTION: forcing a failure. [ 1850.192231][ T5675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1850.205365][ T5675] CPU: 0 PID: 5675 Comm: syz-executor.1 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1850.215716][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1850.225810][ T5675] Call Trace: [ 1850.229183][ T5675] [ 1850.232191][ T5675] dump_stack_lvl+0xda/0x130 [ 1850.236874][ T5675] dump_stack+0x15/0x20 00:06:23 executing program 0: r0 = syz_io_uring_setup(0x2af9, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:23 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) [ 1850.241061][ T5675] should_fail_ex+0x21f/0x230 [ 1850.245781][ T5675] should_fail+0xb/0x10 [ 1850.249975][ T5675] should_fail_usercopy+0x1a/0x20 [ 1850.255082][ T5675] _copy_to_user+0x1e/0x90 [ 1850.259634][ T5675] simple_read_from_buffer+0xa0/0x110 [ 1850.265194][ T5675] proc_fail_nth_read+0xfc/0x140 [ 1850.270241][ T5675] ? proc_fault_inject_write+0x210/0x210 [ 1850.275928][ T5675] vfs_read+0x19e/0x6a0 [ 1850.280139][ T5675] ? __fget_files+0x1cf/0x210 [ 1850.284857][ T5675] ? mutex_lock+0xd/0x30 00:06:23 executing program 4: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 00:06:23 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:23 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 1850.289135][ T5675] ksys_read+0xeb/0x1a0 [ 1850.293340][ T5675] __x64_sys_read+0x42/0x50 [ 1850.297956][ T5675] do_syscall_64+0xcd/0x1d0 [ 1850.302498][ T5675] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1850.308421][ T5675] RIP: 0033:0x7f341b6b5a4c [ 1850.312878][ T5675] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1850.332577][ T5675] RSP: 002b:00007f341aa380c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 00:06:23 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:23 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:23 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:23 executing program 4: r0 = syz_io_uring_setup(0x47b6, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:23 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) [ 1850.343085][ T5675] RAX: ffffffffffffffda RBX: 00007f341b7e4f80 RCX: 00007f341b6b5a4c [ 1850.351098][ T5675] RDX: 000000000000000f RSI: 00007f341aa38130 RDI: 0000000000000003 [ 1850.359090][ T5675] RBP: 00007f341aa38120 R08: 0000000000000000 R09: 0000000000000000 [ 1850.367153][ T5675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1850.375228][ T5675] R13: 000000000000000b R14: 00007f341b7e4f80 R15: 00007ffe2b2949d8 [ 1850.383267][ T5675] 00:06:24 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:24 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) syz_io_uring_setup(0x47b6, &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:24 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1a, 0x0, 0x0) 00:06:24 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x40002000) r2 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:24 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = io_uring_setup(0x72eb, &(0x7f0000000000)={0x0, 0xd2df, 0x2, 0x3, 0x70}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001100)={0x65d0c68a, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], &(0x7f00000010c0)=[0x80, 0x800], 0x1}, 0x20) 00:06:24 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:24 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async, rerun: 64) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async, rerun: 64) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:24 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = io_uring_setup(0x72eb, &(0x7f0000000000)={0x0, 0xd2df, 0x2, 0x3, 0x70}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001100)={0x65d0c68a, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], &(0x7f00000010c0)=[0x80, 0x800], 0x1}, 0x20) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:24 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:24 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = io_uring_setup(0x72eb, &(0x7f0000000000)={0x0, 0xd2df, 0x2, 0x3, 0x70}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001100)={0x65d0c68a, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], &(0x7f00000010c0)=[0x80, 0x800], 0x1}, 0x20) 00:06:24 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0xa0f80, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fime0\x00']) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:24 executing program 1: r0 = syz_io_uring_setup(0x10f4, &(0x7f0000000000)={0x0, 0x5cb5, 0x1, 0x1, 0x33a}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$isdn(0x22, 0x3, 0x21) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x541b, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0x16) 00:06:24 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:24 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0xa0f80, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fime0\x00']) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0xa0f80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fime0\x00']) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:24 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:24 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xfffffffe}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0xa0f80, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fime0\x00']) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (rerun: 64) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x0, @local, 0x4e24, 0x1, 'rr\x00', 0x8, 0x401, 0x41}, 0x2c) r1 = io_uring_setup(0xf45, &(0x7f0000000200)={0x0, 0xe995, 0x10, 0x0, 0x1d4}) r2 = syz_io_uring_setup(0x47b9, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3, 0x0, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8927, &(0x7f0000000080)={'wg2\x00'}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000ff00"/184], 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x109) 00:06:24 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:24 executing program 1: r0 = syz_io_uring_setup(0x10f4, &(0x7f0000000000)={0x0, 0x5cb5, 0x1, 0x1, 0x33a}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r1 = socket$isdn(0x22, 0x3, 0x21) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x541b, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0x16) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:24 executing program 1: syz_io_uring_setup(0x10f4, &(0x7f0000000000)={0x0, 0x5cb5, 0x1, 0x1, 0x33a}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x10f4, &(0x7f0000000000)={0x0, 0x5cb5, 0x1, 0x1, 0x33a}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$isdn(0x22, 0x3, 0x21) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x541b, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0x16) 00:06:24 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 1851.126406][ T5775] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:24 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000080)=""/161, 0xa1}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/34, 0x22}, {&(0x7f0000001180)=""/221, 0xdd}, {&(0x7f0000001280)=""/225, 0xe1}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/30, 0x1e}], 0x8) 00:06:24 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x0, @local, 0x4e24, 0x1, 'rr\x00', 0x8, 0x401, 0x41}, 0x2c) r1 = io_uring_setup(0xf45, &(0x7f0000000200)={0x0, 0xe995, 0x10, 0x0, 0x1d4}) r2 = syz_io_uring_setup(0x47b9, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3, 0x0, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8927, &(0x7f0000000080)={'wg2\x00'}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000ff00"/184], 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x109) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x0, @local, 0x4e24, 0x1, 'rr\x00', 0x8, 0x401, 0x41}, 0x2c) (async) io_uring_setup(0xf45, &(0x7f0000000200)={0x0, 0xe995, 0x10, 0x0, 0x1d4}) (async) syz_io_uring_setup(0x47b9, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3, 0x0, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8927, &(0x7f0000000080)={'wg2\x00'}) (async) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000ff00"/184], 0x15) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x109) (async) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:24 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) [ 1851.209105][ T5796] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1851.262121][ T5805] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:24 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) r2 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:24 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000080)=""/161, 0xa1}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/34, 0x22}, {&(0x7f0000001180)=""/221, 0xdd}, {&(0x7f0000001280)=""/225, 0xe1}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/30, 0x1e}], 0x8) 00:06:24 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:24 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x0, @local, 0x4e24, 0x1, 'rr\x00', 0x8, 0x401, 0x41}, 0x2c) (async, rerun: 64) r1 = io_uring_setup(0xf45, &(0x7f0000000200)={0x0, 0xe995, 0x10, 0x0, 0x1d4}) (rerun: 64) r2 = syz_io_uring_setup(0x47b9, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3, 0x0, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8927, &(0x7f0000000080)={'wg2\x00'}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000ff00"/184], 0x15) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x109) 00:06:24 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async, rerun: 64) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000080)=""/161, 0xa1}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/34, 0x22}, {&(0x7f0000001180)=""/221, 0xdd}, {&(0x7f0000001280)=""/225, 0xe1}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/30, 0x1e}], 0x8) 00:06:25 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:25 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:25 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) r2 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000e80)=[r1, r0, r0], 0x3) 00:06:25 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 1851.802010][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1851.838818][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:25 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:25 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 1851.895088][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1851.927550][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:25 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:25 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:25 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, r0, r0], 0x3) 00:06:25 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '[).#..!:\xce'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x48091) r2 = io_uring_setup(0x231, &(0x7f0000000000)={0x0, 0x65b2, 0x2000, 0x3, 0x27c}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000000600)=[{0x4, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000200)=""/31, 0x1f}], &(0x7f0000000280)=[0x8, 0x2, 0x7f, 0x80000001, 0x7fff, 0x7, 0xffffffff, 0x6]}, {0x4, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/75, 0x4b}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000480)=""/218, 0xda}], &(0x7f00000005c0)=[0x2, 0x10000, 0x2]}], 0x2) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) [ 1851.941182][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:25 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000009c0)={0x7, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/56, 0x38}], &(0x7f0000000980)=[0x7fffffff], 0x4}, 0x20) r1 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, r0, r0], 0x3) 00:06:25 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:25 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}]}, 0x40}, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) [ 1851.975426][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.009315][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:25 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '[).#..!:\xce'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x48091) r2 = io_uring_setup(0x231, &(0x7f0000000000)={0x0, 0x65b2, 0x2000, 0x3, 0x27c}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000000600)=[{0x4, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000200)=""/31, 0x1f}], &(0x7f0000000280)=[0x8, 0x2, 0x7f, 0x80000001, 0x7fff, 0x7, 0xffffffff, 0x6]}, {0x4, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/75, 0x4b}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000480)=""/218, 0xda}], &(0x7f00000005c0)=[0x2, 0x10000, 0x2]}], 0x2) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '[).#..!:\xce'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x48091) (async) io_uring_setup(0x231, &(0x7f0000000000)={0x0, 0x65b2, 0x2000, 0x3, 0x27c}) (async) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000000600)=[{0x4, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000200)=""/31, 0x1f}], &(0x7f0000000280)=[0x8, 0x2, 0x7f, 0x80000001, 0x7fff, 0x7, 0xffffffff, 0x6]}, {0x4, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/75, 0x4b}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000480)=""/218, 0xda}], &(0x7f00000005c0)=[0x2, 0x10000, 0x2]}], 0x2) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) (async) 00:06:25 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) r1 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, r0, r0], 0x3) 00:06:25 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:25 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80003}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) [ 1852.044512][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.061152][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.069397][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.077536][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:25 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:25 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, r0, r0], 0x3) [ 1852.096083][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.116089][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.124044][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.132547][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:25 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '[).#..!:\xce'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x48091) r2 = io_uring_setup(0x231, &(0x7f0000000000)={0x0, 0x65b2, 0x2000, 0x3, 0x27c}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000000600)=[{0x4, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000200)=""/31, 0x1f}], &(0x7f0000000280)=[0x8, 0x2, 0x7f, 0x80000001, 0x7fff, 0x7, 0xffffffff, 0x6]}, {0x4, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/75, 0x4b}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000480)=""/218, 0xda}], &(0x7f00000005c0)=[0x2, 0x10000, 0x2]}], 0x2) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '[).#..!:\xce'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x48091) (async) io_uring_setup(0x231, &(0x7f0000000000)={0x0, 0x65b2, 0x2000, 0x3, 0x27c}) (async) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000000600)=[{0x4, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000200)=""/31, 0x1f}], &(0x7f0000000280)=[0x8, 0x2, 0x7f, 0x80000001, 0x7fff, 0x7, 0xffffffff, 0x6]}, {0x4, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/75, 0x4b}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000480)=""/218, 0xda}], &(0x7f00000005c0)=[0x2, 0x10000, 0x2]}], 0x2) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) (async) 00:06:25 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x3) r1 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, r0, r0], 0x3) 00:06:25 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:25 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) [ 1852.140434][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.163918][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.173953][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:25 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = io_uring_setup(0x2e01, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x15) 00:06:25 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:25 executing program 0: syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:25 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, r0, r0], 0x3) [ 1852.196068][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.234703][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:25 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async, rerun: 64) r0 = io_uring_setup(0x2e01, &(0x7f00000000c0)) (rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x15) (rerun: 64) 00:06:25 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:25 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) [ 1852.246064][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.258987][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.282157][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.295434][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.302598][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.314269][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.326202][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.333313][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.340469][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.348114][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.355799][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.363744][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.370965][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.378262][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.385447][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.392673][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.400110][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.407546][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.414912][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.421971][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.429091][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.436236][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.443663][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.450747][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.457838][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.464944][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.472010][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.479117][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.486182][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.493206][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.500331][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.507484][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.515744][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.522872][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.530138][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.537220][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.544265][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.551407][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.558519][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.565577][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.572627][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.579732][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.587770][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:25 executing program 0: syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) 00:06:25 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 00:06:25 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:25 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) r0 = io_uring_setup(0x2e01, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x15) 00:06:25 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x2bc5, &(0x7f0000000100)={0x0, 0x4972, 0x400, 0x0, 0x373, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:25 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:25 executing program 0: syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) [ 1852.595682][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 1852.602764][ T5821] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:25 executing program 3: r0 = io_uring_setup(0x193e, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:25 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = io_uring_setup(0x15ad, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0x0, 0x80000001], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001240)=[{0x2, 0x1, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/105, 0x69}], &(0x7f0000001140)=[0x5, 0x0, 0x8000000000000000, 0x80000000, 0x0, 0x3, 0x2, 0x3]}, {0x1, 0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001180)=""/52, 0x34}], &(0x7f0000001200)=[0x0, 0xffffffff, 0x9, 0x7, 0x2, 0x81]}], 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00721d059100dc1d0000000000a614f2"]) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x5b4a, &(0x7f0000001480)={0x0, 0x4f43, 0x80, 0x0, 0x361, 0x0, r0}, &(0x7f0000001380), &(0x7f0000001500)=0x0) r4 = syz_io_uring_setup(0x74e, &(0x7f00000023c0), &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(r2, r3, &(0x7f0000001540)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x2, 0x200, 0x0, 0x68d, 0x1, 0x0, {0x0, r5}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r7 = io_uring_setup(0x2b7b, &(0x7f0000001280)={0x0, 0x5a8, 0x4, 0x5, 0x316, 0x0, r6}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001400)={0x1, 0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001300)=""/118, 0x76}], &(0x7f00000013c0)=[0xf3]}, 0x20) 00:06:25 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 00:06:25 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 00:06:25 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x2bc5, &(0x7f0000000100)={0x0, 0x4972, 0x400, 0x0, 0x373, 0x0, r0}) (async) io_uring_setup(0x2bc5, &(0x7f0000000100)={0x0, 0x4972, 0x400, 0x0, 0x373, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:25 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) r0 = io_uring_setup(0x15ad, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0x0, 0x80000001], 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001240)=[{0x2, 0x1, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/105, 0x69}], &(0x7f0000001140)=[0x5, 0x0, 0x8000000000000000, 0x80000000, 0x0, 0x3, 0x2, 0x3]}, {0x1, 0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001180)=""/52, 0x34}], &(0x7f0000001200)=[0x0, 0xffffffff, 0x9, 0x7, 0x2, 0x81]}], 0x2) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00721d059100dc1d0000000000a614f2"]) (async, rerun: 64) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x5b4a, &(0x7f0000001480)={0x0, 0x4f43, 0x80, 0x0, 0x361, 0x0, r0}, &(0x7f0000001380), &(0x7f0000001500)=0x0) (async) r4 = syz_io_uring_setup(0x74e, &(0x7f00000023c0), &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) (async) syz_io_uring_submit(r2, r3, &(0x7f0000001540)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x2, 0x200, 0x0, 0x68d, 0x1, 0x0, {0x0, r5}}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r7 = io_uring_setup(0x2b7b, &(0x7f0000001280)={0x0, 0x5a8, 0x4, 0x5, 0x316, 0x0, r6}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001400)={0x1, 0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001300)=""/118, 0x76}], &(0x7f00000013c0)=[0xf3]}, 0x20) 00:06:25 executing program 3: r0 = io_uring_setup(0x193e, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:25 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 00:06:25 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 00:06:25 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) r0 = io_uring_setup(0x15ad, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0x0, 0x80000001], 0x2) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001240)=[{0x2, 0x1, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/105, 0x69}], &(0x7f0000001140)=[0x5, 0x0, 0x8000000000000000, 0x80000000, 0x0, 0x3, 0x2, 0x3]}, {0x1, 0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001180)=""/52, 0x34}], &(0x7f0000001200)=[0x0, 0xffffffff, 0x9, 0x7, 0x2, 0x81]}], 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00721d059100dc1d0000000000a614f2"]) (async) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff) (async) syz_io_uring_setup(0x5b4a, &(0x7f0000001480)={0x0, 0x4f43, 0x80, 0x0, 0x361, 0x0, r0}, &(0x7f0000001380), &(0x7f0000001500)=0x0) (async) r4 = syz_io_uring_setup(0x74e, &(0x7f00000023c0), &(0x7f0000002440), &(0x7f0000002480)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(r2, r3, &(0x7f0000001540)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x2, 0x200, 0x0, 0x68d, 0x1, 0x0, {0x0, r5}}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r7 = io_uring_setup(0x2b7b, &(0x7f0000001280)={0x0, 0x5a8, 0x4, 0x5, 0x316, 0x0, r6}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001400)={0x1, 0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001300)=""/118, 0x76}], &(0x7f00000013c0)=[0xf3]}, 0x20) 00:06:25 executing program 3: r0 = io_uring_setup(0x193e, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:25 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 00:06:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x0, @local, 0x4e24, 0x1, 'rr\x00', 0x8, 0x401, 0x41}, 0x2c) r1 = io_uring_setup(0xf45, &(0x7f0000000200)={0x0, 0xe995, 0x10, 0x0, 0x1d4}) r2 = syz_io_uring_setup(0x47b9, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3, 0x0, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8927, &(0x7f0000000080)={'wg2\x00'}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000ff00"/184], 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x109) 00:06:25 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000280)={0xafd, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/227, 0xe3}, {&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f00000001c0)=""/30, 0x1e}], &(0x7f0000000240)=[0x81, 0x97c, 0x3f, 0x0], 0x3}, 0x20) 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x2bc5, &(0x7f0000000100)={0x0, 0x4972, 0x400, 0x0, 0x373, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:26 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) 00:06:26 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000280)={0xafd, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/227, 0xe3}, {&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f00000001c0)=""/30, 0x1e}], &(0x7f0000000240)=[0x81, 0x97c, 0x3f, 0x0], 0x3}, 0x20) 00:06:26 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) 00:06:26 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000280)={0xafd, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/227, 0xe3}, {&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f00000001c0)=""/30, 0x1e}], &(0x7f0000000240)=[0x81, 0x97c, 0x3f, 0x0], 0x3}, 0x20) 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (fail_nth: 1) [ 1852.832957][ T5954] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/233, 0xe9}], 0x2) 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:26 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) [ 1852.909440][ T5972] FAULT_INJECTION: forcing a failure. [ 1852.909440][ T5972] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.922248][ T5972] CPU: 0 PID: 5972 Comm: syz-executor.4 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1852.932595][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1852.942681][ T5972] Call Trace: [ 1852.945986][ T5972] [ 1852.949024][ T5972] dump_stack_lvl+0xda/0x130 [ 1852.953662][ T5972] dump_stack+0x15/0x20 00:06:26 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0xba6, 0x200000) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x6, 0x8, 0x6, 0x1a, 0x7fffffff, 0x31fc0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080)) 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/233, 0xe9}], 0x2) 00:06:26 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0xba6, 0x200000) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x6, 0x8, 0x6, 0x1a, 0x7fffffff, 0x31fc0, 0x2}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080)) [ 1852.957955][ T5972] should_fail_ex+0x21f/0x230 [ 1852.962665][ T5972] ? io_rsrc_node_alloc+0x8e/0xe0 [ 1852.967749][ T5972] __should_failslab+0x92/0xa0 [ 1852.972540][ T5972] should_failslab+0x9/0x20 [ 1852.977198][ T5972] kmalloc_trace+0x55/0x2d0 [ 1852.981768][ T5972] io_rsrc_node_alloc+0x8e/0xe0 [ 1852.986666][ T5972] io_rsrc_ref_quiesce+0xb9/0x3d0 [ 1852.991732][ T5972] ? __rcu_read_unlock+0x4d/0x70 [ 1852.996787][ T5972] ? wake_bit_function+0x70/0x70 [ 1853.001788][ T5972] io_sqe_buffers_unregister+0x6c/0xb0 00:06:26 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0xba6, 0x200000) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x6, 0x8, 0x6, 0x1a, 0x7fffffff, 0x31fc0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080)) syz_open_dev$rtc(&(0x7f0000000000), 0xba6, 0x200000) (async) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x6, 0x8, 0x6, 0x1a, 0x7fffffff, 0x31fc0, 0x2}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080)) (async) 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/233, 0xe9}], 0x2) (rerun: 64) 00:06:26 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000328bd700000000000000000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000080105000100000008000100", @ANYRES32=r0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r0, r2, 0x0, 0x0, 0x4}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x300, 0x0, 0x0) [ 1853.007290][ T5972] __se_sys_io_uring_register+0x8a5/0x10e0 [ 1853.013196][ T5972] __x64_sys_io_uring_register+0x55/0x60 [ 1853.018862][ T5972] do_syscall_64+0xcd/0x1d0 [ 1853.023396][ T5972] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1853.029326][ T5972] RIP: 0033:0x7f2049e98da9 [ 1853.033829][ T5972] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = eventfd(0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x48) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x8000, 0x0, &(0x7f0000000180)=[r1, r2, r0, r0, r0]}, 0x5) socket$l2tp6(0xa, 0x2, 0x73) 00:06:26 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) (async) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000328bd700000000000000000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000080105000100000008000100", @ANYRES32=r0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r0, r2, 0x0, 0x0, 0x4}, 0x48) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x300, 0x0, 0x0) 00:06:26 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (fail_nth: 2) 00:06:26 executing program 2: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) eventfd(0x1) (async) r1 = eventfd(0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x48) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x8000, 0x0, &(0x7f0000000180)=[r1, r2, r0, r0, r0]}, 0x5) socket$l2tp6(0xa, 0x2, 0x73) 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) [ 1853.053634][ T5972] RSP: 002b:00007f204921a0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1853.062079][ T5972] RAX: ffffffffffffffda RBX: 00007f2049fc6f80 RCX: 00007f2049e98da9 [ 1853.070090][ T5972] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 1853.078092][ T5972] RBP: 00007f204921a120 R08: 0000000000000000 R09: 0000000000000000 [ 1853.086092][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1853.094114][ T5972] R13: 000000000000000b R14: 00007f2049fc6f80 R15: 00007fff1b81cbb8 [ 1853.102212][ T5972] 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:26 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000400)={'icmp6\x00'}, &(0x7f0000000440)=0x1e) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000328bd700000000000000000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000080105000100000008000100", @ANYRES32=r0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000328bd700000000000000000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000080105000100000008000100", @ANYRES32=r0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x10001, 0x1, 0x800, 0x0, 0x1, 0x7fff, '\x00', r0, r2, 0x0, 0x0, 0x4}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x300, 0x0, 0x0) [ 1853.158053][ T6012] FAULT_INJECTION: forcing a failure. [ 1853.158053][ T6012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1853.171322][ T6012] CPU: 1 PID: 6012 Comm: syz-executor.4 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1853.181676][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1853.191766][ T6012] Call Trace: [ 1853.195064][ T6012] [ 1853.198012][ T6012] dump_stack_lvl+0xda/0x130 [ 1853.202651][ T6012] dump_stack+0x15/0x20 00:06:26 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) r1 = syz_io_uring_setup(0x6f92, &(0x7f0000000000)={0x0, 0xa092, 0x40, 0x0, 0x134, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/219, 0xdb}], 0x2) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:auditd_log_t:s0\x00', 0x22) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100), 0x1) 00:06:26 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) 00:06:26 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) r1 = syz_io_uring_setup(0x6f92, &(0x7f0000000000)={0x0, 0xa092, 0x40, 0x0, 0x134, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/219, 0xdb}], 0x2) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:auditd_log_t:s0\x00', 0x22) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100), 0x1) 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = eventfd(0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x48) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x8000, 0x0, &(0x7f0000000180)=[r1, r2, r0, r0, r0]}, 0x5) (async) socket$l2tp6(0xa, 0x2, 0x73) 00:06:26 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) (rerun: 64) r1 = syz_io_uring_setup(0x6f92, &(0x7f0000000000)={0x0, 0xa092, 0x40, 0x0, 0x134, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/219, 0xdb}], 0x2) (async) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:auditd_log_t:s0\x00', 0x22) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100), 0x1) [ 1853.206982][ T6012] should_fail_ex+0x21f/0x230 [ 1853.211696][ T6012] should_fail+0xb/0x10 [ 1853.215890][ T6012] should_fail_usercopy+0x1a/0x20 [ 1853.220988][ T6012] _copy_to_user+0x1e/0x90 [ 1853.225499][ T6012] simple_read_from_buffer+0xa0/0x110 [ 1853.230931][ T6012] proc_fail_nth_read+0xfc/0x140 [ 1853.236012][ T6012] ? proc_fault_inject_write+0x210/0x210 [ 1853.241706][ T6012] vfs_read+0x19e/0x6a0 [ 1853.245893][ T6012] ? __fget_files+0x1cf/0x210 [ 1853.250705][ T6012] ? mutex_lock+0xd/0x30 00:06:26 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f00000003c0)=[{0x4, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000240)=""/248, 0xf8}], &(0x7f0000000380)=[0xffffffffffffff7f, 0x649b, 0x4, 0x85, 0x1, 0xfffffffffffffffd, 0x8]}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000700)={0x3, 0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000500)=""/171, 0xab}, {&(0x7f00000005c0)=""/158, 0x9e}], &(0x7f00000006c0)=[0xffffffff, 0x5, 0x8000000000000000]}, 0x20) 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) [ 1853.254989][ T6012] ksys_read+0xeb/0x1a0 [ 1853.259332][ T6012] __x64_sys_read+0x42/0x50 [ 1853.263910][ T6012] do_syscall_64+0xcd/0x1d0 [ 1853.268455][ T6012] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1853.274438][ T6012] RIP: 0033:0x7f2049e97a4c [ 1853.278882][ T6012] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1853.298559][ T6012] RSP: 002b:00007f204921a0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 00:06:26 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8000000000000001}}, './file0\x00'}) 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:26 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f00000003c0)=[{0x4, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000240)=""/248, 0xf8}], &(0x7f0000000380)=[0xffffffffffffff7f, 0x649b, 0x4, 0x85, 0x1, 0xfffffffffffffffd, 0x8]}], 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000700)={0x3, 0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000500)=""/171, 0xab}, {&(0x7f00000005c0)=""/158, 0x9e}], &(0x7f00000006c0)=[0xffffffff, 0x5, 0x8000000000000000]}, 0x20) (rerun: 64) 00:06:26 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 1) [ 1853.307029][ T6012] RAX: ffffffffffffffda RBX: 00007f2049fc6f80 RCX: 00007f2049e97a4c [ 1853.315094][ T6012] RDX: 000000000000000f RSI: 00007f204921a130 RDI: 0000000000000004 [ 1853.323098][ T6012] RBP: 00007f204921a120 R08: 0000000000000000 R09: 0000000000000000 [ 1853.331105][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1853.339136][ T6012] R13: 000000000000000b R14: 00007f2049fc6f80 R15: 00007fff1b81cbb8 [ 1853.347173][ T6012] 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async, rerun: 64) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) (async, rerun: 64) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8000000000000001}}, './file0\x00'}) 00:06:26 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f00000003c0)=[{0x4, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000240)=""/248, 0xf8}], &(0x7f0000000380)=[0xffffffffffffff7f, 0x649b, 0x4, 0x85, 0x1, 0xfffffffffffffffd, 0x8]}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000700)={0x3, 0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000500)=""/171, 0xab}, {&(0x7f00000005c0)=""/158, 0x9e}], &(0x7f00000006c0)=[0xffffffff, 0x5, 0x8000000000000000]}, 0x20) 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) [ 1853.386715][ T6048] FAULT_INJECTION: forcing a failure. [ 1853.386715][ T6048] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.399486][ T6048] CPU: 1 PID: 6048 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1853.409872][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1853.419953][ T6048] Call Trace: [ 1853.423247][ T6048] [ 1853.426200][ T6048] dump_stack_lvl+0xda/0x130 [ 1853.430913][ T6048] dump_stack+0x15/0x20 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x2, 0x0, 0x0) 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x0) [ 1853.435108][ T6048] should_fail_ex+0x21f/0x230 [ 1853.439915][ T6048] ? io_rsrc_data_alloc+0x43/0x1a0 [ 1853.445119][ T6048] __should_failslab+0x92/0xa0 [ 1853.449929][ T6048] should_failslab+0x9/0x20 [ 1853.454468][ T6048] kmalloc_trace+0x55/0x2d0 [ 1853.459045][ T6048] io_rsrc_data_alloc+0x43/0x1a0 [ 1853.464049][ T6048] io_sqe_buffers_register+0xda/0x3a0 [ 1853.469480][ T6048] __se_sys_io_uring_register+0x936/0x10e0 [ 1853.475410][ T6048] __x64_sys_io_uring_register+0x55/0x60 [ 1853.481093][ T6048] do_syscall_64+0xcd/0x1d0 00:06:26 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000240)={0x2, 0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/121, 0x79}], &(0x7f0000000200)=[0xa2, 0x5, 0xfffffffffffff000, 0x5, 0x0]}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000229bd7000fcdbdf25080000000800050001000000080005007f0000000c00028008000600030000000800060006000100"], 0x38}}, 0x90) r5 = io_uring_setup(0x6be2, &(0x7f0000000000)={0x0, 0xed80, 0x10, 0x1, 0x24a}) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x4, 0x0, 0x0) [ 1853.485653][ T6048] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1853.491576][ T6048] RIP: 0033:0x7feeab59eda9 [ 1853.496015][ T6048] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1853.515653][ T6048] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1853.524187][ T6048] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x5, 0x0, 0x0) 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8000000000000001}}, './file0\x00'}) 00:06:26 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 2) 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x6, 0x0, 0x0) 00:06:26 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000240)={0x2, 0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/121, 0x79}], &(0x7f0000000200)=[0xa2, 0x5, 0xfffffffffffff000, 0x5, 0x0]}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000229bd7000fcdbdf25080000000800050001000000080005007f0000000c00028008000600030000000800060006000100"], 0x38}}, 0x90) r5 = io_uring_setup(0x6be2, &(0x7f0000000000)={0x0, 0xed80, 0x10, 0x1, 0x24a}) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) [ 1853.532312][ T6048] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 1853.540304][ T6048] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1853.548379][ T6048] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000001 [ 1853.556380][ T6048] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1853.564381][ T6048] 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x5aff, &(0x7f0000000000)={0x0, 0xcf76, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x7, 0x0, 0x0) 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x8, 0x0, 0x0) 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x5aff, &(0x7f0000000000)={0x0, 0xcf76, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1853.643389][ T6086] FAULT_INJECTION: forcing a failure. [ 1853.643389][ T6086] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.656199][ T6086] CPU: 0 PID: 6086 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1853.666618][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1853.676750][ T6086] Call Trace: [ 1853.680091][ T6086] [ 1853.683046][ T6086] dump_stack_lvl+0xda/0x130 [ 1853.687681][ T6086] dump_stack+0x15/0x20 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x9, 0x0, 0x0) 00:06:26 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0xa, 0x0, 0x0) [ 1853.691876][ T6086] should_fail_ex+0x21f/0x230 [ 1853.696617][ T6086] ? io_alloc_page_table+0x3b/0x100 [ 1853.701858][ T6086] __should_failslab+0x92/0xa0 [ 1853.706647][ T6086] should_failslab+0x9/0x20 [ 1853.711379][ T6086] __kmalloc+0xb6/0x3b0 [ 1853.715581][ T6086] io_alloc_page_table+0x3b/0x100 [ 1853.720692][ T6086] io_rsrc_data_alloc+0x78/0x1a0 [ 1853.725791][ T6086] io_sqe_buffers_register+0xda/0x3a0 [ 1853.731220][ T6086] __se_sys_io_uring_register+0x936/0x10e0 [ 1853.737141][ T6086] __x64_sys_io_uring_register+0x55/0x60 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x5aff, &(0x7f0000000000)={0x0, 0xcf76, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:26 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002d80)=[{0x4, 0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000002c0)=""/211, 0xd3}], &(0x7f0000000400)}, {0x3, 0x1, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f0000000540)=""/83, 0x53}], &(0x7f0000000700)=[0x7fffffffffffffff]}, {0x4, 0x1, 0x0, &(0x7f0000001940)=[{&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/73, 0x49}], &(0x7f0000001980)=[0x0, 0x3f, 0x20, 0x32a4f5c6, 0xfffffffffffff9d8]}, {0x8, 0x1, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000019c0)=""/178, 0xb2}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/87, 0x57}, {&(0x7f0000002b00)=""/68, 0x44}, {&(0x7f0000002b80)=""/36, 0x24}, {&(0x7f0000002bc0)=""/75, 0x4b}, {&(0x7f0000002c40)=""/8, 0x8}, {&(0x7f0000002c80)=""/49, 0x31}], &(0x7f0000002d40)=[0x1f, 0xdfd, 0x0, 0x0, 0xfffffffffffffffd, 0x10001, 0x596]}], 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:26 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000240)={0x2, 0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/121, 0x79}], &(0x7f0000000200)=[0xa2, 0x5, 0xfffffffffffff000, 0x5, 0x0]}, 0x20) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000229bd7000fcdbdf25080000000800050001000000080005007f0000000c00028008000600030000000800060006000100"], 0x38}}, 0x90) (async) r5 = io_uring_setup(0x6be2, &(0x7f0000000000)={0x0, 0xed80, 0x10, 0x1, 0x24a}) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) [ 1853.742825][ T6086] do_syscall_64+0xcd/0x1d0 [ 1853.747362][ T6086] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1853.753338][ T6086] RIP: 0033:0x7feeab59eda9 [ 1853.757771][ T6086] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1853.777408][ T6086] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab 00:06:26 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0xb, 0x0, 0x0) 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0xc, 0x0, 0x0) 00:06:27 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002d80)=[{0x4, 0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000002c0)=""/211, 0xd3}], &(0x7f0000000400)}, {0x3, 0x1, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f0000000540)=""/83, 0x53}], &(0x7f0000000700)=[0x7fffffffffffffff]}, {0x4, 0x1, 0x0, &(0x7f0000001940)=[{&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/73, 0x49}], &(0x7f0000001980)=[0x0, 0x3f, 0x20, 0x32a4f5c6, 0xfffffffffffff9d8]}, {0x8, 0x1, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000019c0)=""/178, 0xb2}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/87, 0x57}, {&(0x7f0000002b00)=""/68, 0x44}, {&(0x7f0000002b80)=""/36, 0x24}, {&(0x7f0000002bc0)=""/75, 0x4b}, {&(0x7f0000002c40)=""/8, 0x8}, {&(0x7f0000002c80)=""/49, 0x31}], &(0x7f0000002d40)=[0x1f, 0xdfd, 0x0, 0x0, 0xfffffffffffffffd, 0x10001, 0x596]}], 0x4) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:27 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 3) [ 1853.785932][ T6086] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1853.794455][ T6086] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 1853.802450][ T6086] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1853.810456][ T6086] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000001 [ 1853.818502][ T6086] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1853.826508][ T6086] 00:06:27 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0xfc, 0x101, 0x12000000, 0x84, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0xa7) 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) [ 1853.899943][ T6123] FAULT_INJECTION: forcing a failure. [ 1853.899943][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.912686][ T6123] CPU: 1 PID: 6123 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1853.923098][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1853.933203][ T6123] Call Trace: [ 1853.936499][ T6123] [ 1853.939497][ T6123] dump_stack_lvl+0xda/0x130 [ 1853.944129][ T6123] dump_stack+0x15/0x20 [ 1853.948330][ T6123] should_fail_ex+0x21f/0x230 [ 1853.953035][ T6123] ? io_alloc_page_table+0x90/0x100 [ 1853.958310][ T6123] __should_failslab+0x92/0xa0 [ 1853.963126][ T6123] should_failslab+0x9/0x20 [ 1853.967830][ T6123] __kmalloc+0xb6/0x3b0 [ 1853.972023][ T6123] io_alloc_page_table+0x90/0x100 [ 1853.977087][ T6123] io_rsrc_data_alloc+0x78/0x1a0 [ 1853.982053][ T6123] io_sqe_buffers_register+0xda/0x3a0 [ 1853.987538][ T6123] __se_sys_io_uring_register+0x936/0x10e0 [ 1853.988527][ T6137] FAULT_INJECTION: forcing a failure. [ 1853.988527][ T6137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1853.993471][ T6123] __x64_sys_io_uring_register+0x55/0x60 [ 1854.012297][ T6123] do_syscall_64+0xcd/0x1d0 [ 1854.016963][ T6123] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1854.022872][ T6123] RIP: 0033:0x7feeab59eda9 [ 1854.027322][ T6123] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0xd, 0x0, 0x0) 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff], 0x1) 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0xe, 0x0, 0x0) 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) (fail_nth: 1) [ 1854.046965][ T6123] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1854.055387][ T6123] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1854.063387][ T6123] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 1854.072388][ T6123] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1854.080415][ T6123] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000001 [ 1854.088427][ T6123] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1854.096429][ T6123] 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0xf, 0x0, 0x0) 00:06:27 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 4) 00:06:27 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0xfc, 0x101, 0x12000000, 0x84, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0xa7) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) connect$l2tp6(r0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0xfc, 0x101, 0x12000000, 0x84, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0xa7) (async) 00:06:27 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002d80)=[{0x4, 0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000002c0)=""/211, 0xd3}], &(0x7f0000000400)}, {0x3, 0x1, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f0000000540)=""/83, 0x53}], &(0x7f0000000700)=[0x7fffffffffffffff]}, {0x4, 0x1, 0x0, &(0x7f0000001940)=[{&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/73, 0x49}], &(0x7f0000001980)=[0x0, 0x3f, 0x20, 0x32a4f5c6, 0xfffffffffffff9d8]}, {0x8, 0x1, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000019c0)=""/178, 0xb2}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/87, 0x57}, {&(0x7f0000002b00)=""/68, 0x44}, {&(0x7f0000002b80)=""/36, 0x24}, {&(0x7f0000002bc0)=""/75, 0x4b}, {&(0x7f0000002c40)=""/8, 0x8}, {&(0x7f0000002c80)=""/49, 0x31}], &(0x7f0000002d40)=[0x1f, 0xdfd, 0x0, 0x0, 0xfffffffffffffffd, 0x10001, 0x596]}], 0x4) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1854.099475][ T6137] CPU: 0 PID: 6137 Comm: syz-executor.3 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1854.109909][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1854.120065][ T6137] Call Trace: [ 1854.123364][ T6137] [ 1854.126317][ T6137] dump_stack_lvl+0xda/0x130 [ 1854.130991][ T6137] dump_stack+0x15/0x20 [ 1854.135234][ T6137] should_fail_ex+0x21f/0x230 [ 1854.139967][ T6137] should_fail+0xb/0x10 [ 1854.144229][ T6137] should_fail_usercopy+0x1a/0x20 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x10, 0x0, 0x0) [ 1854.149333][ T6137] _copy_to_user+0x1e/0x90 [ 1854.153857][ T6137] simple_read_from_buffer+0xa0/0x110 [ 1854.159252][ T6137] proc_fail_nth_read+0xfc/0x140 [ 1854.164269][ T6137] ? proc_fault_inject_write+0x210/0x210 [ 1854.169961][ T6137] vfs_read+0x19e/0x6a0 [ 1854.174228][ T6137] ? __fget_files+0x1cf/0x210 [ 1854.178977][ T6137] ? mutex_lock+0xd/0x30 [ 1854.183255][ T6137] ksys_read+0xeb/0x1a0 [ 1854.187528][ T6137] __x64_sys_read+0x42/0x50 [ 1854.192072][ T6137] do_syscall_64+0xcd/0x1d0 [ 1854.194034][ T6146] FAULT_INJECTION: forcing a failure. [ 1854.194034][ T6146] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.196634][ T6137] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1854.196680][ T6137] RIP: 0033:0x7f1d43daba4c [ 1854.196699][ T6137] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1854.196723][ T6137] RSP: 002b:00007f1d4312e0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1854.247670][ T6137] RAX: ffffffffffffffda RBX: 00007f1d43edaf80 RCX: 00007f1d43daba4c [ 1854.255644][ T6137] RDX: 000000000000000f RSI: 00007f1d4312e130 RDI: 0000000000000004 [ 1854.263644][ T6137] RBP: 00007f1d4312e120 R08: 0000000000000000 R09: 0000000000000000 [ 1854.271663][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1854.279703][ T6137] R13: 000000000000000b R14: 00007f1d43edaf80 R15: 00007fff5ef7d1c8 [ 1854.287722][ T6137] [ 1854.290746][ T6146] CPU: 1 PID: 6146 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1854.301149][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1854.311235][ T6146] Call Trace: [ 1854.314526][ T6146] [ 1854.317467][ T6146] dump_stack_lvl+0xda/0x130 [ 1854.322181][ T6146] dump_stack+0x15/0x20 [ 1854.326393][ T6146] should_fail_ex+0x21f/0x230 [ 1854.331105][ T6146] ? io_sqe_buffers_register+0x104/0x3a0 [ 1854.336778][ T6146] __should_failslab+0x92/0xa0 [ 1854.341648][ T6146] should_failslab+0x9/0x20 [ 1854.346187][ T6146] __kmalloc+0xb6/0x3b0 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x11, 0x0, 0x0) 00:06:27 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000140), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x6, 0x4], 0x2) 00:06:27 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r0, 0x0, 0x0) (async) connect$l2tp6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0xfc, 0x101, 0x12000000, 0x84, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0xa7) 00:06:27 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = syz_io_uring_setup(0x47e, &(0x7f0000000000)={0x0, 0x519b, 0x40, 0x0, 0x307}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 00:06:27 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x47e, &(0x7f0000000000)={0x0, 0x519b, 0x40, 0x0, 0x307}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) [ 1854.350459][ T6146] io_sqe_buffers_register+0x104/0x3a0 [ 1854.356057][ T6146] __se_sys_io_uring_register+0x936/0x10e0 [ 1854.362043][ T6146] __x64_sys_io_uring_register+0x55/0x60 [ 1854.367889][ T6146] do_syscall_64+0xcd/0x1d0 [ 1854.372444][ T6146] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1854.378360][ T6146] RIP: 0033:0x7feeab59eda9 00:06:27 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000140), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x6, 0x4], 0x2) 00:06:27 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000140), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x6, 0x4], 0x2) [ 1854.382867][ T6146] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1854.402651][ T6146] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1854.411090][ T6146] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1854.419082][ T6146] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 1854.427161][ T6146] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1854.435206][ T6146] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000001 [ 1854.443227][ T6146] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, &(0x7f0000000e80), 0x0) 00:06:27 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 5) 00:06:27 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x47e, &(0x7f0000000000)={0x0, 0x519b, 0x40, 0x0, 0x307}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x12, 0x0, 0x0) 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x4, &(0x7f0000000e80), 0x0) [ 1854.451219][ T6146] 00:06:27 executing program 1: r0 = syz_io_uring_setup(0x7c0a, &(0x7f0000000200), &(0x7f0000003c40), &(0x7f0000006480)=0x0) r2 = io_uring_setup(0x6005, &(0x7f0000000280)={0x0, 0x66b9, 0x40, 0x2, 0x146, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'nicvf0\x00'}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0), 0x0) syz_io_uring_setup(0x36e5, &(0x7f0000000000)={0x0, 0x9e9c, 0x800, 0x1, 0x1f0, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0xa, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0x0) 00:06:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x26, 0x0, 0x1436, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xde1e, 0x100}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x26, 0x0, 0x1436, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xde1e, 0x100}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1854.503610][ T6179] FAULT_INJECTION: forcing a failure. [ 1854.503610][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1854.516764][ T6179] CPU: 0 PID: 6179 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1854.527223][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1854.537326][ T6179] Call Trace: [ 1854.540684][ T6179] [ 1854.543630][ T6179] dump_stack_lvl+0xda/0x130 [ 1854.548332][ T6179] dump_stack+0x15/0x20 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x13, 0x0, 0x0) 00:06:27 executing program 1: r0 = syz_io_uring_setup(0x7c0a, &(0x7f0000000200), &(0x7f0000003c40), &(0x7f0000006480)=0x0) r2 = io_uring_setup(0x6005, &(0x7f0000000280)={0x0, 0x66b9, 0x40, 0x2, 0x146, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'nicvf0\x00'}}) (async) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'nicvf0\x00'}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0), 0x0) syz_io_uring_setup(0x36e5, &(0x7f0000000000)={0x0, 0x9e9c, 0x800, 0x1, 0x1f0, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x36e5, &(0x7f0000000000)={0x0, 0x9e9c, 0x800, 0x1, 0x1f0, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0xa, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0x0) [ 1854.552575][ T6179] should_fail_ex+0x21f/0x230 [ 1854.557299][ T6179] should_fail+0xb/0x10 [ 1854.561614][ T6179] should_fail_usercopy+0x1a/0x20 [ 1854.566712][ T6179] _copy_from_user+0x1e/0xd0 [ 1854.571501][ T6179] io_copy_iov+0x71/0x130 [ 1854.576637][ T6179] io_sqe_buffers_register+0x15e/0x3a0 [ 1854.582228][ T6179] __se_sys_io_uring_register+0x936/0x10e0 [ 1854.588098][ T6179] __x64_sys_io_uring_register+0x55/0x60 [ 1854.593773][ T6179] do_syscall_64+0xcd/0x1d0 [ 1854.598307][ T6179] entry_SYSCALL_64_after_hwframe+0x63/0x6b 00:06:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x26, 0x0, 0x1436, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xde1e, 0x100}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x26, 0x0, 0x1436, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) (async) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xde1e, 0x100}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, &(0x7f0000000e80), 0x0) [ 1854.604258][ T6179] RIP: 0033:0x7feeab59eda9 [ 1854.608696][ T6179] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1854.628353][ T6179] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1854.636816][ T6179] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1854.644815][ T6179] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 00:06:27 executing program 1: r0 = syz_io_uring_setup(0x7c0a, &(0x7f0000000200), &(0x7f0000003c40), &(0x7f0000006480)=0x0) r2 = io_uring_setup(0x6005, &(0x7f0000000280)={0x0, 0x66b9, 0x40, 0x2, 0x146, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'nicvf0\x00'}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0), 0x0) (async) syz_io_uring_setup(0x36e5, &(0x7f0000000000)={0x0, 0x9e9c, 0x800, 0x1, 0x1f0, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0xa, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0x0) 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x6, &(0x7f0000000e80), 0x0) 00:06:27 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required={0x3, 0xc}, @ioring_restriction_register_op={0x0, 0x9}], 0x2) 00:06:27 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 6) 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x14, 0x0, 0x0) 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, &(0x7f0000000e80), 0x0) [ 1854.652900][ T6179] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1854.660892][ T6179] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000001 [ 1854.668885][ T6179] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1854.676919][ T6179] 00:06:27 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required={0x3, 0xc}, @ioring_restriction_register_op={0x0, 0x9}], 0x2) 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x15, 0x0, 0x0) 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000e80), 0x0) [ 1854.754371][ T6216] FAULT_INJECTION: forcing a failure. [ 1854.754371][ T6216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1854.767544][ T6216] CPU: 1 PID: 6216 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1854.777914][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1854.788092][ T6216] Call Trace: [ 1854.791408][ T6216] [ 1854.794382][ T6216] dump_stack_lvl+0xda/0x130 [ 1854.799006][ T6216] dump_stack+0x15/0x20 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x9, &(0x7f0000000e80), 0x0) 00:06:27 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0xa, &(0x7f0000000e80), 0x0) 00:06:27 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x16, 0x0, 0x0) 00:06:28 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x17, 0x0, 0x0) 00:06:28 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required={0x3, 0xc}, @ioring_restriction_register_op={0x0, 0x9}], 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required={0x3, 0xc}, @ioring_restriction_register_op={0x0, 0x9}], 0x2) (async) [ 1854.803257][ T6216] should_fail_ex+0x21f/0x230 [ 1854.808014][ T6216] should_fail+0xb/0x10 [ 1854.812215][ T6216] should_fail_usercopy+0x1a/0x20 [ 1854.817293][ T6216] _copy_from_user+0x1e/0xd0 [ 1854.821937][ T6216] io_copy_iov+0x71/0x130 [ 1854.826325][ T6216] io_sqe_buffers_register+0x15e/0x3a0 [ 1854.831843][ T6216] __se_sys_io_uring_register+0x936/0x10e0 [ 1854.837757][ T6216] __x64_sys_io_uring_register+0x55/0x60 [ 1854.843538][ T6216] do_syscall_64+0xcd/0x1d0 [ 1854.848067][ T6216] entry_SYSCALL_64_after_hwframe+0x63/0x6b 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0xb, &(0x7f0000000e80), 0x0) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0xc, &(0x7f0000000e80), 0x0) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x18, 0x0, 0x0) [ 1854.853989][ T6216] RIP: 0033:0x7feeab59eda9 [ 1854.858437][ T6216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1854.878076][ T6216] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1854.886532][ T6216] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1854.894745][ T6216] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 00:06:28 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb91}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9e50}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r4 = syz_open_dev$rtc(&(0x7f0000000280), 0xff, 0x62001) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xfe) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0xd, &(0x7f0000000e80), 0x0) 00:06:28 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) 00:06:28 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 7) [ 1854.902746][ T6216] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1854.910836][ T6216] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000001 [ 1854.918873][ T6216] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1854.926921][ T6216] 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x19, 0x0, 0x0) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0xe, &(0x7f0000000e80), 0x0) 00:06:28 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) [ 1854.995238][ T6249] FAULT_INJECTION: forcing a failure. [ 1854.995238][ T6249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1855.008488][ T6249] CPU: 0 PID: 6249 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1855.018042][ T6258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=6258 comm=syz-executor.2 [ 1855.018900][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1855.041780][ T6249] Call Trace: [ 1855.045074][ T6249] [ 1855.048071][ T6249] dump_stack_lvl+0xda/0x130 [ 1855.052702][ T6249] dump_stack+0x15/0x20 [ 1855.056889][ T6249] should_fail_ex+0x21f/0x230 [ 1855.061653][ T6249] should_fail+0xb/0x10 [ 1855.065852][ T6249] should_fail_usercopy+0x1a/0x20 [ 1855.070952][ T6249] _copy_from_user+0x1e/0xd0 [ 1855.072739][ T6268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=6268 comm=syz-executor.2 [ 1855.075660][ T6249] io_copy_iov+0x71/0x130 00:06:28 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb91}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9e50}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r4 = syz_open_dev$rtc(&(0x7f0000000280), 0xff, 0x62001) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xfe) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb91}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9e50}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) (async) syz_open_dev$rtc(&(0x7f0000000280), 0xff, 0x62001) (async) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xfe) (async) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0xf, &(0x7f0000000e80), 0x0) 00:06:28 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x7d79, &(0x7f0000000040)={0x0, 0x5355, 0x2000, 0x3, 0x3af, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0xfffffffffffffc46) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1a, 0x0, 0x0) 00:06:28 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb91}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9e50}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r4 = syz_open_dev$rtc(&(0x7f0000000280), 0xff, 0x62001) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xfe) 00:06:28 executing program 2: r0 = syz_io_uring_setup(0x57b6, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0x1a4}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1855.075699][ T6249] io_sqe_buffers_register+0x15e/0x3a0 [ 1855.098376][ T6249] __se_sys_io_uring_register+0x936/0x10e0 [ 1855.104227][ T6249] __x64_sys_io_uring_register+0x55/0x60 [ 1855.109958][ T6249] do_syscall_64+0xcd/0x1d0 [ 1855.114578][ T6249] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1855.118824][ T6274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=6274 comm=syz-executor.2 [ 1855.120581][ T6249] RIP: 0033:0x7feeab59eda9 00:06:28 executing program 2: r0 = syz_io_uring_setup(0x57b6, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0x1a4}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:28 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x7d79, &(0x7f0000000040)={0x0, 0x5355, 0x2000, 0x3, 0x3af, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0xfffffffffffffc46) [ 1855.120601][ T6249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1855.157580][ T6249] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1855.166053][ T6249] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1855.174060][ T6249] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 1855.182059][ T6249] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 00:06:28 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) (async) syz_io_uring_setup(0x7d79, &(0x7f0000000040)={0x0, 0x5355, 0x2000, 0x3, 0x3af, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0xfffffffffffffc46) (rerun: 64) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x10, &(0x7f0000000e80), 0x0) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x2, 0x0) 00:06:28 executing program 2: r0 = syz_io_uring_setup(0x57b6, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0x1a4}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x57b6, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0x1a4}, &(0x7f0000000100), &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:28 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 8) [ 1855.190094][ T6249] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000001 [ 1855.198105][ T6249] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1855.206218][ T6249] 00:06:28 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000400)="dcab953eb601a53ff4b00410e3d439dc32c19b3049bca4b363d30ae90cfa02ef05e7d9ec504534bb5a8b08c6dca0526a0b7fa141055aadf752744b0f52eda8dce90cacdd6806c51edb2ff301da3996023518acd5fcefd7c3363e1a78e7c8b6abe60761e6d84431f63fac261e05619947bcf838", 0x73) r0 = io_uring_setup(0x6da4, &(0x7f0000000000)={0x0, 0xb94b, 0x4, 0x3, 0x185}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f00000003c0)=[{0x4, 0x1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/123, 0x7b}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/204, 0xcc}, {&(0x7f0000000240)=""/209, 0xd1}], &(0x7f0000000380)}], 0x1) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x11, &(0x7f0000000e80), 0x0) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x2000, 0x0) 00:06:28 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000400)="dcab953eb601a53ff4b00410e3d439dc32c19b3049bca4b363d30ae90cfa02ef05e7d9ec504534bb5a8b08c6dca0526a0b7fa141055aadf752744b0f52eda8dce90cacdd6806c51edb2ff301da3996023518acd5fcefd7c3363e1a78e7c8b6abe60761e6d84431f63fac261e05619947bcf838", 0x73) (async) r0 = io_uring_setup(0x6da4, &(0x7f0000000000)={0x0, 0xb94b, 0x4, 0x3, 0x185}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f00000003c0)=[{0x4, 0x1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/123, 0x7b}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/204, 0xcc}, {&(0x7f0000000240)=""/209, 0xd1}], &(0x7f0000000380)}], 0x1) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x12, &(0x7f0000000e80), 0x0) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x2000000, 0x0) [ 1855.293605][ T6300] FAULT_INJECTION: forcing a failure. [ 1855.293605][ T6300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1855.306803][ T6300] CPU: 1 PID: 6300 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1855.317164][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1855.327316][ T6300] Call Trace: [ 1855.330720][ T6300] [ 1855.333679][ T6300] dump_stack_lvl+0xda/0x130 [ 1855.338426][ T6300] dump_stack+0x15/0x20 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000e80), 0x0) 00:06:28 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000200)={&(0x7f0000001000)={[{&(0x7f0000000140)="29a69f4c22ebcd1d265ad4ec64e561672b4b62757d09f684a18205640f795b93bbb2524fc5e79e4d8b42849abccc63aa0913a402d4b583f927b9fa515db6848e33c649ccbeac68d586b543970eb100696dd686c98ce6585f3145fb2a08513c647c3c41aa07a53840dcdb5202cfc6fb870e6d3cf12fb3fb44ecdc499363c92088035eb0acbd9603f4f0bd4b4423cc80d1e136054f", 0x94, 0x2}]}, 0x1, 0x1}, 0x1) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x20000000, 0x0) [ 1855.342617][ T6300] should_fail_ex+0x21f/0x230 [ 1855.347365][ T6300] should_fail+0xb/0x10 [ 1855.351609][ T6300] should_fail_usercopy+0x1a/0x20 [ 1855.356698][ T6300] _copy_from_user+0x1e/0xd0 [ 1855.361387][ T6300] io_copy_iov+0x71/0x130 [ 1855.365760][ T6300] io_sqe_buffers_register+0x15e/0x3a0 [ 1855.371304][ T6300] __se_sys_io_uring_register+0x936/0x10e0 [ 1855.377229][ T6300] __x64_sys_io_uring_register+0x55/0x60 [ 1855.382897][ T6300] do_syscall_64+0xcd/0x1d0 [ 1855.387520][ T6300] entry_SYSCALL_64_after_hwframe+0x63/0x6b 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f0000000e80), 0x0) 00:06:28 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000400)="dcab953eb601a53ff4b00410e3d439dc32c19b3049bca4b363d30ae90cfa02ef05e7d9ec504534bb5a8b08c6dca0526a0b7fa141055aadf752744b0f52eda8dce90cacdd6806c51edb2ff301da3996023518acd5fcefd7c3363e1a78e7c8b6abe60761e6d84431f63fac261e05619947bcf838", 0x73) (async) r0 = io_uring_setup(0x6da4, &(0x7f0000000000)={0x0, 0xb94b, 0x4, 0x3, 0x185}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f00000003c0)=[{0x4, 0x1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/123, 0x7b}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/204, 0xcc}, {&(0x7f0000000240)=""/209, 0xd1}], &(0x7f0000000380)}], 0x1) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x200000000000000, 0x0) [ 1855.393509][ T6300] RIP: 0033:0x7feeab59eda9 [ 1855.397994][ T6300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1855.417627][ T6300] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1855.426117][ T6300] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1855.434109][ T6300] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x2000000000000000, 0x0) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x15, &(0x7f0000000e80), 0x0) 00:06:28 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000200)={&(0x7f0000001000)={[{&(0x7f0000000140)="29a69f4c22ebcd1d265ad4ec64e561672b4b62757d09f684a18205640f795b93bbb2524fc5e79e4d8b42849abccc63aa0913a402d4b583f927b9fa515db6848e33c649ccbeac68d586b543970eb100696dd686c98ce6585f3145fb2a08513c647c3c41aa07a53840dcdb5202cfc6fb870e6d3cf12fb3fb44ecdc499363c92088035eb0acbd9603f4f0bd4b4423cc80d1e136054f", 0x94, 0x2}]}, 0x1, 0x1}, 0x1) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1855.442118][ T6300] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1855.450169][ T6300] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000001 [ 1855.458166][ T6300] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1855.466229][ T6300] 00:06:28 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000200)={&(0x7f0000001000)={[{&(0x7f0000000140)="29a69f4c22ebcd1d265ad4ec64e561672b4b62757d09f684a18205640f795b93bbb2524fc5e79e4d8b42849abccc63aa0913a402d4b583f927b9fa515db6848e33c649ccbeac68d586b543970eb100696dd686c98ce6585f3145fb2a08513c647c3c41aa07a53840dcdb5202cfc6fb870e6d3cf12fb3fb44ecdc499363c92088035eb0acbd9603f4f0bd4b4423cc80d1e136054f", 0x94, 0x2}]}, 0x1, 0x1}, 0x1) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:28 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/46, 0x2e}, {&(0x7f0000001040)=""/172, 0xac}], 0x3) 00:06:28 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 9) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x16, &(0x7f0000000e80), 0x0) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x2) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x17, &(0x7f0000000e80), 0x0) [ 1855.528821][ T6335] FAULT_INJECTION: forcing a failure. [ 1855.528821][ T6335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1855.541972][ T6335] CPU: 1 PID: 6335 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1855.552432][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1855.562535][ T6335] Call Trace: [ 1855.565986][ T6335] [ 1855.568930][ T6335] dump_stack_lvl+0xda/0x130 [ 1855.573555][ T6335] dump_stack+0x15/0x20 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x2000) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000e80), 0x0) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x2000000) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000e80), 0x0) [ 1855.577812][ T6335] should_fail_ex+0x21f/0x230 [ 1855.582525][ T6335] should_fail+0xb/0x10 [ 1855.586761][ T6335] should_fail_usercopy+0x1a/0x20 [ 1855.591834][ T6335] _copy_from_user+0x1e/0xd0 [ 1855.596458][ T6335] io_copy_iov+0x71/0x130 [ 1855.600877][ T6335] io_sqe_buffers_register+0x15e/0x3a0 [ 1855.606523][ T6335] __se_sys_io_uring_register+0x936/0x10e0 [ 1855.612376][ T6335] __x64_sys_io_uring_register+0x55/0x60 [ 1855.618156][ T6335] do_syscall_64+0xcd/0x1d0 [ 1855.622698][ T6335] entry_SYSCALL_64_after_hwframe+0x63/0x6b 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x20000000) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x1a, &(0x7f0000000e80), 0x0) [ 1855.628615][ T6335] RIP: 0033:0x7feeab59eda9 [ 1855.633098][ T6335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1855.652734][ T6335] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1855.661232][ T6335] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1855.669243][ T6335] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x2) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x200000000000000) 00:06:28 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x2000000) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x2000000000000000) 00:06:28 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 10) [ 1855.677235][ T6335] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1855.685273][ T6335] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000001 [ 1855.693362][ T6335] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1855.701445][ T6335] 00:06:28 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/46, 0x2e}, {&(0x7f0000001040)=""/172, 0xac}], 0x3) 00:06:28 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:06:28 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x20) (async) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/46, 0x2e}, {&(0x7f0000001040)=""/172, 0xac}], 0x3) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x200000000000000) 00:06:28 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/87, 0x57}], &(0x7f00000001c0)=[0xc3b, 0x2, 0x8, 0x0, 0xc3b]}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/150, 0x96}], &(0x7f0000000340)=[0x1], 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:28 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) syz_io_uring_setup(0x481c, &(0x7f0000000000)={0x0, 0xc643, 0x40, 0x1, 0x24a, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) r1 = syz_io_uring_setup(0x545d, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) [ 1855.776612][ T6371] FAULT_INJECTION: forcing a failure. [ 1855.776612][ T6371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1855.789768][ T6371] CPU: 1 PID: 6371 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1855.800195][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1855.810318][ T6371] Call Trace: [ 1855.813615][ T6371] [ 1855.816567][ T6371] dump_stack_lvl+0xda/0x130 [ 1855.821201][ T6371] dump_stack+0x15/0x20 00:06:29 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/87, 0x57}], &(0x7f00000001c0)=[0xc3b, 0x2, 0x8, 0x0, 0xc3b]}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/150, 0x96}], &(0x7f0000000340)=[0x1], 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) (rerun: 64) 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x40000, 0x0, 0x0, 0x96}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1855.825473][ T6371] should_fail_ex+0x21f/0x230 [ 1855.830226][ T6371] should_fail+0xb/0x10 [ 1855.834413][ T6371] should_fail_usercopy+0x1a/0x20 [ 1855.839580][ T6371] _copy_from_user+0x1e/0xd0 [ 1855.844219][ T6371] io_copy_iov+0x71/0x130 [ 1855.848609][ T6371] io_sqe_buffers_register+0x15e/0x3a0 [ 1855.854110][ T6371] __se_sys_io_uring_register+0x936/0x10e0 [ 1855.859954][ T6371] __x64_sys_io_uring_register+0x55/0x60 [ 1855.865654][ T6371] do_syscall_64+0xcd/0x1d0 [ 1855.870252][ T6371] entry_SYSCALL_64_after_hwframe+0x63/0x6b 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x40000, 0x0, 0x0, 0x96}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:29 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="000f5500000000f59564eb34d66241a87b32c23c8493d005c56147a89c0387e241add47dabff479a727a7f72926955ce3b536bf1a6ab68627e6d8055f5f202314a99", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)="61b921716f5b76c8876c2cff4a65dd31587e243331c2f7ff74c6b5796c357e502e66fe6b1601469cc738a62fd3f605856c7a330fdfec9803cf0f511e8330", 0x3e) r1 = syz_io_uring_setup(0x2b77, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000002680)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x300, 0x0, 0x0) [ 1855.876177][ T6371] RIP: 0033:0x7feeab59eda9 [ 1855.880675][ T6371] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1855.900313][ T6371] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1855.908759][ T6371] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1855.916779][ T6371] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 00:06:29 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) syz_io_uring_setup(0x481c, &(0x7f0000000000)={0x0, 0xc643, 0x40, 0x1, 0x24a, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) (async) r1 = syz_io_uring_setup(0x545d, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) 00:06:29 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/87, 0x57}], &(0x7f00000001c0)=[0xc3b, 0x2, 0x8, 0x0, 0xc3b]}, 0x20) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/150, 0x96}], &(0x7f0000000340)=[0x1], 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x40000, 0x0, 0x0, 0x96}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x40000, 0x0, 0x0, 0x96}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) 00:06:29 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 11) [ 1855.924792][ T6371] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1855.932783][ T6371] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000002 [ 1855.940794][ T6371] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1855.948770][ T6371] 00:06:29 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="000f5500000000f59564eb34d66241a87b32c23c8493d005c56147a89c0387e241add47dabff479a727a7f72926955ce3b536bf1a6ab68627e6d8055f5f202314a99", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)="61b921716f5b76c8876c2cff4a65dd31587e243331c2f7ff74c6b5796c357e502e66fe6b1601469cc738a62fd3f605856c7a330fdfec9803cf0f511e8330", 0x3e) r1 = syz_io_uring_setup(0x2b77, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000002680)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x300, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="000f5500000000f59564eb34d66241a87b32c23c8493d005c56147a89c0387e241add47dabff479a727a7f72926955ce3b536bf1a6ab68627e6d8055f5f202314a99", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)="61b921716f5b76c8876c2cff4a65dd31587e243331c2f7ff74c6b5796c357e502e66fe6b1601469cc738a62fd3f605856c7a330fdfec9803cf0f511e8330", 0x3e) (async) syz_io_uring_setup(0x2b77, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000002680)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x300, 0x0, 0x0) (async) 00:06:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b2, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x200000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x2684, &(0x7f0000000100)={0x0, 0x8869, 0x2000, 0x1, 0xf1, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b2, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x200000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x2684, &(0x7f0000000100)={0x0, 0x8869, 0x2000, 0x1, 0xf1, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) [ 1856.013526][ T6406] FAULT_INJECTION: forcing a failure. [ 1856.013526][ T6406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.026667][ T6406] CPU: 1 PID: 6406 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1856.037054][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1856.047241][ T6406] Call Trace: [ 1856.050557][ T6406] [ 1856.053801][ T6406] dump_stack_lvl+0xda/0x130 [ 1856.058439][ T6406] dump_stack+0x15/0x20 00:06:29 executing program 3: io_uring_setup(0x193e, &(0x7f0000000180)) (async) r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) syz_io_uring_setup(0x481c, &(0x7f0000000000)={0x0, 0xc643, 0x40, 0x1, 0x24a, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) syz_io_uring_setup(0x545d, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r1 = syz_io_uring_setup(0x545d, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b2, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x200000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r1 = syz_io_uring_setup(0x2684, &(0x7f0000000100)={0x0, 0x8869, 0x2000, 0x1, 0xf1, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b9, &(0x7f0000000000)={0x0, 0x92e5, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xe68, &(0x7f0000002c00), &(0x7f0000002c80), &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_op, @ioring_restriction_sqe_op={0x1, 0x4}, @ioring_restriction_sqe_op={0x1, 0x3}, @ioring_restriction_sqe_flags_allowed={0x2, 0x10}, @ioring_restriction_sqe_flags_allowed={0x2, 0x10}, @ioring_restriction_register_op={0x0, 0xb}, @ioring_restriction_sqe_flags_allowed={0x2, 0xc}, @ioring_restriction_sqe_flags_required={0x3, 0xa}], 0x9) [ 1856.062718][ T6406] should_fail_ex+0x21f/0x230 [ 1856.067440][ T6406] should_fail+0xb/0x10 [ 1856.071705][ T6406] should_fail_usercopy+0x1a/0x20 [ 1856.076776][ T6406] _copy_from_user+0x1e/0xd0 [ 1856.081507][ T6406] io_copy_iov+0x71/0x130 [ 1856.085948][ T6406] io_sqe_buffers_register+0x15e/0x3a0 [ 1856.091560][ T6406] __se_sys_io_uring_register+0x936/0x10e0 [ 1856.097437][ T6406] __x64_sys_io_uring_register+0x55/0x60 [ 1856.103143][ T6406] do_syscall_64+0xcd/0x1d0 [ 1856.107716][ T6406] entry_SYSCALL_64_after_hwframe+0x63/0x6b 00:06:29 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/195, 0xc3}, {&(0x7f0000000100)=""/99, 0x63}, {&(0x7f0000000280)=""/132, 0x84}, {&(0x7f0000000200)=""/55, 0x37}], &(0x7f0000000380)=[0x7, 0x8, 0x0, 0x5, 0xe9, 0xa0000], 0x4}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="302000009733a3e5d6fbfb79f644f6fb3ec94d845dd3fe5366c6df1a91257bbbc6e197aff2bb20a3aed38434313b6572629e1f5b9d5db791e823792a49b6948194cad6eba025244fad0b0657039833c5699a19dac93c37bb36bfe915f1932a6eb5897b49", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2501"], 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x200440dd) 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b9, &(0x7f0000000000)={0x0, 0x92e5, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) r1 = syz_io_uring_setup(0xe68, &(0x7f0000002c00), &(0x7f0000002c80), &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_op, @ioring_restriction_sqe_op={0x1, 0x4}, @ioring_restriction_sqe_op={0x1, 0x3}, @ioring_restriction_sqe_flags_allowed={0x2, 0x10}, @ioring_restriction_sqe_flags_allowed={0x2, 0x10}, @ioring_restriction_register_op={0x0, 0xb}, @ioring_restriction_sqe_flags_allowed={0x2, 0xc}, @ioring_restriction_sqe_flags_required={0x3, 0xa}], 0x9) [ 1856.113692][ T6406] RIP: 0033:0x7feeab59eda9 [ 1856.118188][ T6406] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1856.137859][ T6406] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1856.146331][ T6406] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1856.154456][ T6406] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 00:06:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:06:29 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/195, 0xc3}, {&(0x7f0000000100)=""/99, 0x63}, {&(0x7f0000000280)=""/132, 0x84}, {&(0x7f0000000200)=""/55, 0x37}], &(0x7f0000000380)=[0x7, 0x8, 0x0, 0x5, 0xe9, 0xa0000], 0x4}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="302000009733a3e5d6fbfb79f644f6fb3ec94d845dd3fe5366c6df1a91257bbbc6e197aff2bb20a3aed38434313b6572629e1f5b9d5db791e823792a49b6948194cad6eba025244fad0b0657039833c5699a19dac93c37bb36bfe915f1932a6eb5897b49", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2501"], 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x200440dd) 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b9, &(0x7f0000000000)={0x0, 0x92e5, 0x0, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xe68, &(0x7f0000002c00), &(0x7f0000002c80), &(0x7f0000002cc0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_op, @ioring_restriction_sqe_op={0x1, 0x4}, @ioring_restriction_sqe_op={0x1, 0x3}, @ioring_restriction_sqe_flags_allowed={0x2, 0x10}, @ioring_restriction_sqe_flags_allowed={0x2, 0x10}, @ioring_restriction_register_op={0x0, 0xb}, @ioring_restriction_sqe_flags_allowed={0x2, 0xc}, @ioring_restriction_sqe_flags_required={0x3, 0xa}], 0x9) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_op, @ioring_restriction_sqe_op={0x1, 0x4}, @ioring_restriction_sqe_op={0x1, 0x3}, @ioring_restriction_sqe_flags_allowed={0x2, 0x10}, @ioring_restriction_sqe_flags_allowed={0x2, 0x10}, @ioring_restriction_register_op={0x0, 0xb}, @ioring_restriction_sqe_flags_allowed={0x2, 0xc}, @ioring_restriction_sqe_flags_required={0x3, 0xa}], 0x9) 00:06:29 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="000f5500000000f59564eb34d66241a87b32c23c8493d005c56147a89c0387e241add47dabff479a727a7f72926955ce3b536bf1a6ab68627e6d8055f5f202314a99", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)="61b921716f5b76c8876c2cff4a65dd31587e243331c2f7ff74c6b5796c357e502e66fe6b1601469cc738a62fd3f605856c7a330fdfec9803cf0f511e8330", 0x3e) r1 = syz_io_uring_setup(0x2b77, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000002680)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x300, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="000f5500000000f59564eb34d66241a87b32c23c8493d005c56147a89c0387e241add47dabff479a727a7f72926955ce3b536bf1a6ab68627e6d8055f5f202314a99", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)="61b921716f5b76c8876c2cff4a65dd31587e243331c2f7ff74c6b5796c357e502e66fe6b1601469cc738a62fd3f605856c7a330fdfec9803cf0f511e8330", 0x3e) (async) syz_io_uring_setup(0x2b77, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000002680)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x300, 0x0, 0x0) (async) 00:06:29 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x10801, 0x0) r1 = syz_io_uring_setup(0x758e, &(0x7f0000000000)={0x0, 0x3de0, 0x100, 0x2, 0x1e5, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000400)={0x2, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/247, 0xf7}], &(0x7f00000003c0)=[0x6, 0xc, 0x7fffffff, 0x2, 0x0, 0xb134]}, 0x20) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x2, 0x0, r0, 0x1, &(0x7f0000000140)="8d4a1e71bc9f7aeae585c9c9d7d5e5981b4a44c4f3ad2f59ccee17b0da60c57144faaa5a484246f9908bbeb731921934779cc7d6d0065c2984ad9c79a1896361eb0df7918b22c61aa7632687c454e1927d", 0x51, 0x0, 0x0, {0x0, r4}}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x300, 0x0, 0x0) bind$isdn(r0, &(0x7f0000000200)={0x22, 0x0, 0x4, 0x6, 0x21}, 0x6) 00:06:29 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 12) [ 1856.162523][ T6406] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1856.170601][ T6406] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000002 [ 1856.178652][ T6406] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1856.186702][ T6406] 00:06:29 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/195, 0xc3}, {&(0x7f0000000100)=""/99, 0x63}, {&(0x7f0000000280)=""/132, 0x84}, {&(0x7f0000000200)=""/55, 0x37}], &(0x7f0000000380)=[0x7, 0x8, 0x0, 0x5, 0xe9, 0xa0000], 0x4}, 0x20) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="302000009733a3e5d6fbfb79f644f6fb3ec94d845dd3fe5366c6df1a91257bbbc6e197aff2bb20a3aed38434313b6572629e1f5b9d5db791e823792a49b6948194cad6eba025244fad0b0657039833c5699a19dac93c37bb36bfe915f1932a6eb5897b49", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2501"], 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x200440dd) [ 1856.257891][ T6450] ================================================================== [ 1856.266029][ T6450] BUG: KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register [ 1856.274918][ T6450] [ 1856.277260][ T6450] read-write to 0xffff8881085870a0 of 4 bytes by task 6449 on cpu 1: [ 1856.285349][ T6450] io_sqe_files_register+0x2bf/0x3b0 [ 1856.290666][ T6450] __se_sys_io_uring_register+0x471/0x10e0 [ 1856.293889][ T6453] FAULT_INJECTION: forcing a failure. [ 1856.293889][ T6453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.296508][ T6450] __x64_sys_io_uring_register+0x55/0x60 [ 1856.296551][ T6450] do_syscall_64+0xcd/0x1d0 [ 1856.296578][ T6450] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1856.296601][ T6450] [ 1856.296607][ T6450] read to 0xffff8881085870a0 of 4 bytes by task 6450 on cpu 0: [ 1856.296625][ T6450] __se_sys_io_uring_register+0x9f0/0x10e0 [ 1856.296658][ T6450] __x64_sys_io_uring_register+0x55/0x60 [ 1856.296690][ T6450] do_syscall_64+0xcd/0x1d0 00:06:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) (async) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) 00:06:29 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x10801, 0x0) r1 = syz_io_uring_setup(0x758e, &(0x7f0000000000)={0x0, 0x3de0, 0x100, 0x2, 0x1e5, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000400)={0x2, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/247, 0xf7}], &(0x7f00000003c0)=[0x6, 0xc, 0x7fffffff, 0x2, 0x0, 0xb134]}, 0x20) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x2, 0x0, r0, 0x1, &(0x7f0000000140)="8d4a1e71bc9f7aeae585c9c9d7d5e5981b4a44c4f3ad2f59ccee17b0da60c57144faaa5a484246f9908bbeb731921934779cc7d6d0065c2984ad9c79a1896361eb0df7918b22c61aa7632687c454e1927d", 0x51, 0x0, 0x0, {0x0, r4}}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x300, 0x0, 0x0) (async) bind$isdn(r0, &(0x7f0000000200)={0x22, 0x0, 0x4, 0x6, 0x21}, 0x6) [ 1856.309733][ T6453] CPU: 1 PID: 6453 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1856.315313][ T6450] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1856.319817][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1856.325689][ T6450] [ 1856.325693][ T6450] value changed: 0x00000000 -> 0x00000001 [ 1856.328018][ T6453] Call Trace: [ 1856.328030][ T6453] [ 1856.335544][ T6450] [ 1856.335549][ T6450] Reported by Kernel Concurrency Sanitizer on: [ 1856.335559][ T6450] CPU: 0 PID: 6450 Comm: syz-executor.3 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1856.341339][ T6453] dump_stack_lvl+0xda/0x130 [ 1856.346950][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1856.351439][ T6453] dump_stack+0x15/0x20 [ 1856.361738][ T6450] ================================================================== [ 1856.367612][ T6453] should_fail_ex+0x21f/0x230 [ 1856.442809][ T6453] should_fail+0xb/0x10 [ 1856.447004][ T6453] should_fail_usercopy+0x1a/0x20 [ 1856.452101][ T6453] _copy_from_user+0x1e/0xd0 00:06:29 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r1, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@private, @initdev, 0x0}, &(0x7f0000000380)=0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000780)={0x18, 0x0, {0x3, @broadcast, 'team_slave_1\x00'}}) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x16, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x401}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x38, '\x00', r2, 0x24, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x0, 0x2, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r4, r6], 0x0, 0x10, 0x5}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000540)="438f05249ef5c9ca2fb5a97a451fcea90852d96ee77ca67427649d1c3fc5ffc1462a431266146908cf786710cdbe74b4c5f8c0afe9b6b24c2aa4", 0x3a) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x5}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, r8, 0x200, 0x70bd27, 0x72, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd70}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200040d4}, 0x50) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000e80), 0x0) 00:06:29 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r1, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@private, @initdev, 0x0}, &(0x7f0000000380)=0xc) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000780)={0x18, 0x0, {0x3, @broadcast, 'team_slave_1\x00'}}) (async) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, 0x0) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x16, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x401}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x38, '\x00', r2, 0x24, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x0, 0x2, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r4, r6], 0x0, 0x10, 0x5}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000540)="438f05249ef5c9ca2fb5a97a451fcea90852d96ee77ca67427649d1c3fc5ffc1462a431266146908cf786710cdbe74b4c5f8c0afe9b6b24c2aa4", 0x3a) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x5}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r10 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, r8, 0x200, 0x70bd27, 0x72, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd70}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200040d4}, 0x50) (async) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000e80), 0x0) [ 1856.456738][ T6453] io_copy_iov+0x71/0x130 [ 1856.461211][ T6453] io_sqe_buffers_register+0x15e/0x3a0 [ 1856.466746][ T6453] __se_sys_io_uring_register+0x936/0x10e0 [ 1856.472683][ T6453] __x64_sys_io_uring_register+0x55/0x60 [ 1856.478543][ T6453] do_syscall_64+0xcd/0x1d0 [ 1856.483177][ T6453] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1856.491194][ T6453] RIP: 0033:0x7feeab59eda9 00:06:29 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r1, 0x0, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@private, @initdev, 0x0}, &(0x7f0000000380)=0xc) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000780)={0x18, 0x0, {0x3, @broadcast, 'team_slave_1\x00'}}) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x16, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x401}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x38, '\x00', r2, 0x24, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x0, 0x2, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r4, r6], 0x0, 0x10, 0x5}, 0x90) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000540)="438f05249ef5c9ca2fb5a97a451fcea90852d96ee77ca67427649d1c3fc5ffc1462a431266146908cf786710cdbe74b4c5f8c0afe9b6b24c2aa4", 0x3a) (async) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x5}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, r8, 0x200, 0x70bd27, 0x72, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd70}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200040d4}, 0x50) (async) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000e80), 0x0) 00:06:29 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000200)={&(0x7f0000001000)={[{&(0x7f0000000180)="e503513c74da362e1a582567c240e63db58f1f25370361ba42dc0156adcd47996741baf6b8d5a76ff39398bdfca96a0b22531f18e2d4f72fad72ccde58947bb815b0a3efdadbb12435fa75c3f03adf95ad3b657b", 0x54, 0x3}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_setup(0x42e5, &(0x7f0000000100)={0x0, 0x9084, 0x4, 0x0, 0x148, 0x0, r0}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{&(0x7f0000000240)="fb7b9a22768427d1c41afeaefd05bd69c03f791dfe1ea0ea8ee2e87e9a1d6df4932e4606e5abbc35617a1d2c9740146b6707491a20522832313c49966cd6d451772180d4ba700bf0a34d28e5be6062c15f7e27d169ae8a8070f08d67881c23e2aa85b1bbe9e01296ec3efa4cc8d4d2aed6af5e0e4b538a3cbd6eb355a52882bee196ddfa99f45ad27016a10ec8dcd3fdc738c0f6a68d4d09c5333f84fa85f1af2a7348268c9ec5764cea14c4011055e3fbd58651a942a9473ac5657e802de52d721822d4fbb1b90d18e8f828ad7397c7a9423909b76c33698fad537c77e9c3bd4617bec7e87c2df9dbaf3eb2f03bf33154116f2ab2acc6f10cbb43c51fb7", 0xfe}, {&(0x7f0000000340)="bffdb230c1c6006c9131a63f768f0ee5c33ffbf8297217fffa40e88f1f200fd21bdd196144f1c654393262fe17ceb12284f587b8b46a2432b3a48a9a38f1e4b2e9617bebd9f0f49d096b6d6300fed155bd2d772df80219", 0x57}]}, 0x2, 0x3}, 0x1) [ 1856.495701][ T6453] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1856.515365][ T6453] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1856.523886][ T6453] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1856.531930][ T6453] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 1856.540012][ T6453] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1856.548010][ T6453] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000002 00:06:29 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000200)={&(0x7f0000001000)={[{&(0x7f0000000180)="e503513c74da362e1a582567c240e63db58f1f25370361ba42dc0156adcd47996741baf6b8d5a76ff39398bdfca96a0b22531f18e2d4f72fad72ccde58947bb815b0a3efdadbb12435fa75c3f03adf95ad3b657b", 0x54, 0x3}]}, 0x1, 0x3}, 0x1) (async) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000200)={&(0x7f0000001000)={[{&(0x7f0000000180)="e503513c74da362e1a582567c240e63db58f1f25370361ba42dc0156adcd47996741baf6b8d5a76ff39398bdfca96a0b22531f18e2d4f72fad72ccde58947bb815b0a3efdadbb12435fa75c3f03adf95ad3b657b", 0x54, 0x3}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_setup(0x42e5, &(0x7f0000000100)={0x0, 0x9084, 0x4, 0x0, 0x148, 0x0, r0}) (async) io_uring_setup(0x42e5, &(0x7f0000000100)={0x0, 0x9084, 0x4, 0x0, 0x148, 0x0, r0}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{&(0x7f0000000240)="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", 0xfe}, {&(0x7f0000000340)="bffdb230c1c6006c9131a63f768f0ee5c33ffbf8297217fffa40e88f1f200fd21bdd196144f1c654393262fe17ceb12284f587b8b46a2432b3a48a9a38f1e4b2e9617bebd9f0f49d096b6d6300fed155bd2d772df80219", 0x57}]}, 0x2, 0x3}, 0x1) 00:06:29 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x10801, 0x0) r1 = syz_io_uring_setup(0x758e, &(0x7f0000000000)={0x0, 0x3de0, 0x100, 0x2, 0x1e5, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000400)={0x2, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/247, 0xf7}], &(0x7f00000003c0)=[0x6, 0xc, 0x7fffffff, 0x2, 0x0, 0xb134]}, 0x20) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x2, 0x0, r0, 0x1, &(0x7f0000000140)="8d4a1e71bc9f7aeae585c9c9d7d5e5981b4a44c4f3ad2f59ccee17b0da60c57144faaa5a484246f9908bbeb731921934779cc7d6d0065c2984ad9c79a1896361eb0df7918b22c61aa7632687c454e1927d", 0x51, 0x0, 0x0, {0x0, r4}}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x300, 0x0, 0x0) (async) bind$isdn(r0, &(0x7f0000000200)={0x22, 0x0, 0x4, 0x6, 0x21}, 0x6) 00:06:29 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 13) 00:06:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) (async) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1856.556065][ T6453] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1856.564148][ T6453] 00:06:29 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = io_uring_setup(0x475, &(0x7f0000000240)={0x0, 0x4d69, 0x2, 0x3, 0xf}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000c6adf3be00ccd0256b"], 0x14}}, 0x0) r2 = syz_open_dev$rtc(&(0x7f00000002c0), 0xffff, 0x8000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000300)=[r1, r2, 0xffffffffffffffff]}, 0x3) r3 = syz_io_uring_setup(0x205c, &(0x7f0000000100)={0x0, 0xd831, 0x20, 0x2, 0x6b}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000200), 0x1) r4 = syz_io_uring_setup(0x9dc, &(0x7f0000000000)={0x0, 0xf3e7, 0x4, 0x1, 0x5c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) [ 1856.608939][ T6487] FAULT_INJECTION: forcing a failure. [ 1856.608939][ T6487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.622126][ T6487] CPU: 1 PID: 6487 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1856.632498][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1856.642591][ T6487] Call Trace: [ 1856.646027][ T6487] [ 1856.648979][ T6487] dump_stack_lvl+0xda/0x130 [ 1856.653672][ T6487] dump_stack+0x15/0x20 00:06:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) (async) r3 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:29 executing program 3: r0 = io_uring_setup(0x66d3, &(0x7f0000000100)={0x0, 0x74ae, 0x400}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_setup(0x2d8d, &(0x7f0000000000)={0x0, 0x19ba, 0x8, 0x2, 0x218, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xf43}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r1, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000004, 0x10, r0, 0x0) 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000540)={0x7, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/5, 0x5}, {&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f0000000500)=[0x7]}, 0x20) [ 1856.657939][ T6487] should_fail_ex+0x21f/0x230 [ 1856.662663][ T6487] should_fail+0xb/0x10 [ 1856.666858][ T6487] should_fail_usercopy+0x1a/0x20 [ 1856.671968][ T6487] _copy_from_user+0x1e/0xd0 [ 1856.676597][ T6487] io_copy_iov+0x71/0x130 [ 1856.681030][ T6487] io_sqe_buffers_register+0x15e/0x3a0 [ 1856.686544][ T6487] __se_sys_io_uring_register+0x936/0x10e0 [ 1856.692472][ T6487] __x64_sys_io_uring_register+0x55/0x60 [ 1856.698267][ T6487] do_syscall_64+0xcd/0x1d0 [ 1856.702816][ T6487] entry_SYSCALL_64_after_hwframe+0x63/0x6b 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000540)={0x7, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/5, 0x5}, {&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f0000000500)=[0x7]}, 0x20) 00:06:29 executing program 3: r0 = io_uring_setup(0x66d3, &(0x7f0000000100)={0x0, 0x74ae, 0x400}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async, rerun: 64) io_uring_setup(0x2d8d, &(0x7f0000000000)={0x0, 0x19ba, 0x8, 0x2, 0x218, 0x0, r0}) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xf43}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r1, 0x1) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000004, 0x10, r0, 0x0) [ 1856.708837][ T6487] RIP: 0033:0x7feeab59eda9 [ 1856.713304][ T6487] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1856.732943][ T6487] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1856.741527][ T6487] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1856.749594][ T6487] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 00:06:29 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000200)={&(0x7f0000001000)={[{&(0x7f0000000180)="e503513c74da362e1a582567c240e63db58f1f25370361ba42dc0156adcd47996741baf6b8d5a76ff39398bdfca96a0b22531f18e2d4f72fad72ccde58947bb815b0a3efdadbb12435fa75c3f03adf95ad3b657b", 0x54, 0x3}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_setup(0x42e5, &(0x7f0000000100)={0x0, 0x9084, 0x4, 0x0, 0x148, 0x0, r0}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{&(0x7f0000000240)="fb7b9a22768427d1c41afeaefd05bd69c03f791dfe1ea0ea8ee2e87e9a1d6df4932e4606e5abbc35617a1d2c9740146b6707491a20522832313c49966cd6d451772180d4ba700bf0a34d28e5be6062c15f7e27d169ae8a8070f08d67881c23e2aa85b1bbe9e01296ec3efa4cc8d4d2aed6af5e0e4b538a3cbd6eb355a52882bee196ddfa99f45ad27016a10ec8dcd3fdc738c0f6a68d4d09c5333f84fa85f1af2a7348268c9ec5764cea14c4011055e3fbd58651a942a9473ac5657e802de52d721822d4fbb1b90d18e8f828ad7397c7a9423909b76c33698fad537c77e9c3bd4617bec7e87c2df9dbaf3eb2f03bf33154116f2ab2acc6f10cbb43c51fb7", 0xfe}, {&(0x7f0000000340)="bffdb230c1c6006c9131a63f768f0ee5c33ffbf8297217fffa40e88f1f200fd21bdd196144f1c654393262fe17ceb12284f587b8b46a2432b3a48a9a38f1e4b2e9617bebd9f0f49d096b6d6300fed155bd2d772df80219", 0x57}]}, 0x2, 0x3}, 0x1) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000200)={&(0x7f0000001000)={[{&(0x7f0000000180)="e503513c74da362e1a582567c240e63db58f1f25370361ba42dc0156adcd47996741baf6b8d5a76ff39398bdfca96a0b22531f18e2d4f72fad72ccde58947bb815b0a3efdadbb12435fa75c3f03adf95ad3b657b", 0x54, 0x3}]}, 0x1, 0x3}, 0x1) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) (async) io_uring_setup(0x42e5, &(0x7f0000000100)={0x0, 0x9084, 0x4, 0x0, 0x148, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{&(0x7f0000000240)="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", 0xfe}, {&(0x7f0000000340)="bffdb230c1c6006c9131a63f768f0ee5c33ffbf8297217fffa40e88f1f200fd21bdd196144f1c654393262fe17ceb12284f587b8b46a2432b3a48a9a38f1e4b2e9617bebd9f0f49d096b6d6300fed155bd2d772df80219", 0x57}]}, 0x2, 0x3}, 0x1) (async) 00:06:29 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000540)={0x7, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/5, 0x5}, {&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f0000000500)=[0x7]}, 0x20) 00:06:29 executing program 3: r0 = io_uring_setup(0x66d3, &(0x7f0000000100)={0x0, 0x74ae, 0x400}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_setup(0x2d8d, &(0x7f0000000000)={0x0, 0x19ba, 0x8, 0x2, 0x218, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xf43}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r1, 0x1) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000004, 0x10, r0, 0x0) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x0) 00:06:30 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = io_uring_setup(0x475, &(0x7f0000000240)={0x0, 0x4d69, 0x2, 0x3, 0xf}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000c6adf3be00ccd0256b"], 0x14}}, 0x0) (async) r2 = syz_open_dev$rtc(&(0x7f00000002c0), 0xffff, 0x8000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000300)=[r1, r2, 0xffffffffffffffff]}, 0x3) (async, rerun: 64) r3 = syz_io_uring_setup(0x205c, &(0x7f0000000100)={0x0, 0xd831, 0x20, 0x2, 0x6b}, &(0x7f0000000180), &(0x7f00000001c0)) (rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000200), 0x1) r4 = syz_io_uring_setup(0x9dc, &(0x7f0000000000)={0x0, 0xf3e7, 0x4, 0x1, 0x5c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) [ 1856.757755][ T6487] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1856.765751][ T6487] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000002 [ 1856.773754][ T6487] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1856.781776][ T6487] 00:06:30 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 14) 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1}, 0x4) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/205, 0xcd}], &(0x7f0000000140)=[0xfffffffffffffc01, 0x8, 0x5, 0x8200000000000000, 0xff, 0xffffffffffff2903]}, 0x20) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x0) (async) [ 1856.860709][ T6533] FAULT_INJECTION: forcing a failure. [ 1856.860709][ T6533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.873840][ T6533] CPU: 0 PID: 6533 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1856.884267][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1856.894408][ T6533] Call Trace: [ 1856.897785][ T6533] [ 1856.900818][ T6533] dump_stack_lvl+0xda/0x130 [ 1856.905520][ T6533] dump_stack+0x15/0x20 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1}, 0x4) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/205, 0xcd}], &(0x7f0000000140)=[0xfffffffffffffc01, 0x8, 0x5, 0x8200000000000000, 0xff, 0xffffffffffff2903]}, 0x20) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1}, 0x4) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/205, 0xcd}], &(0x7f0000000140)=[0xfffffffffffffc01, 0x8, 0x5, 0x8200000000000000, 0xff, 0xffffffffffff2903]}, 0x20) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/230, 0xe6}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/8, 0x8}], 0x3) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000280)=""/116, 0x74}], 0x2) syz_io_uring_setup(0x5869, &(0x7f0000000100)={0x0, 0x73a0, 0x4, 0x1, 0x2e2, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) [ 1856.909855][ T6533] should_fail_ex+0x21f/0x230 [ 1856.914595][ T6533] should_fail+0xb/0x10 [ 1856.918790][ T6533] should_fail_usercopy+0x1a/0x20 [ 1856.923857][ T6533] _copy_from_user+0x1e/0xd0 [ 1856.928572][ T6533] io_copy_iov+0x71/0x130 [ 1856.932946][ T6533] io_sqe_buffers_register+0x15e/0x3a0 [ 1856.938443][ T6533] __se_sys_io_uring_register+0x936/0x10e0 [ 1856.944724][ T6533] ? restore_fpregs_from_fpstate+0x99/0x180 [ 1856.950694][ T6533] __x64_sys_io_uring_register+0x55/0x60 [ 1856.956494][ T6533] do_syscall_64+0xcd/0x1d0 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x0) (async) [ 1856.961071][ T6533] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1856.967122][ T6533] RIP: 0033:0x7feeab59eda9 [ 1856.971601][ T6533] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1856.991241][ T6533] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1856.999695][ T6533] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 00:06:30 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r0 = io_uring_setup(0x475, &(0x7f0000000240)={0x0, 0x4d69, 0x2, 0x3, 0xf}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000c6adf3be00ccd0256b"], 0x14}}, 0x0) r2 = syz_open_dev$rtc(&(0x7f00000002c0), 0xffff, 0x8000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000300)=[r1, r2, 0xffffffffffffffff]}, 0x3) r3 = syz_io_uring_setup(0x205c, &(0x7f0000000100)={0x0, 0xd831, 0x20, 0x2, 0x6b}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000200), 0x1) r4 = syz_io_uring_setup(0x9dc, &(0x7f0000000000)={0x0, 0xf3e7, 0x4, 0x1, 0x5c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) io_uring_setup(0x475, &(0x7f0000000240)={0x0, 0x4d69, 0x2, 0x3, 0xf}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000c6adf3be00ccd0256b"], 0x14}}, 0x0) (async) syz_open_dev$rtc(&(0x7f00000002c0), 0xffff, 0x8000) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000300)=[r1, r2, 0xffffffffffffffff]}, 0x3) (async) syz_io_uring_setup(0x205c, &(0x7f0000000100)={0x0, 0xd831, 0x20, 0x2, 0x6b}, &(0x7f0000000180), &(0x7f00000001c0)) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000200), 0x1) (async) syz_io_uring_setup(0x9dc, &(0x7f0000000000)={0x0, 0xf3e7, 0x4, 0x1, 0x5c}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) (async) 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/230, 0xe6}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/8, 0x8}], 0x3) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000280)=""/116, 0x74}], 0x2) (async) syz_io_uring_setup(0x5869, &(0x7f0000000100)={0x0, 0x73a0, 0x4, 0x1, 0x2e2, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) 00:06:30 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x4) 00:06:30 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 15) [ 1857.007736][ T6533] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 1857.015723][ T6533] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1857.023729][ T6533] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000002 [ 1857.031725][ T6533] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1857.039766][ T6533] 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) r1 = socket(0x18, 0x0, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000012c0)=[{0x2, 0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000440)=""/69, 0x45}], &(0x7f0000000500)=[0x9, 0x400]}, {0x9, 0x1, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)=""/147, 0x93}, {&(0x7f0000000540)=""/71, 0x47}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/80, 0x50}, {&(0x7f0000000900)=""/138, 0x8a}, {&(0x7f00000009c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/184, 0xb8}, {&(0x7f0000000ac0)=""/73, 0x49}], &(0x7f0000000c00)=[0x6, 0x8, 0xde, 0x4, 0x8001]}, {0x2, 0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/189, 0xbd}, {&(0x7f0000000d00)=""/103, 0x67}], &(0x7f0000000dc0)=[0x65, 0x8000000000000000, 0x6, 0x3ff, 0x2, 0x3, 0xfff]}, {0x5, 0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e00)=""/22, 0x16}, {&(0x7f0000000e40)=""/186, 0xba}, {&(0x7f0000000f00)=""/247, 0xf7}, {&(0x7f0000001000)=""/237, 0xed}, {&(0x7f0000001100)=""/196, 0xc4}], &(0x7f0000001280)=[0x1f, 0x2, 0x2e6, 0x2e, 0x8001, 0x729]}], 0x4) bind$isdn(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48094}, 0x20000840) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1) r4 = io_uring_setup(0xf61, &(0x7f0000000100)={0x0, 0x17a7, 0x400, 0x0, 0x8, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 00:06:30 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x4) (async) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x4) 00:06:30 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x4) (async) 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/230, 0xe6}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/8, 0x8}], 0x3) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000280)=""/116, 0x74}], 0x2) syz_io_uring_setup(0x5869, &(0x7f0000000100)={0x0, 0x73a0, 0x4, 0x1, 0x2e2, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/230, 0xe6}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/8, 0x8}], 0x3) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000280)=""/116, 0x74}], 0x2) (async) syz_io_uring_setup(0x5869, &(0x7f0000000100)={0x0, 0x73a0, 0x4, 0x1, 0x2e2, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) (async) 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000440)={&(0x7f0000001000)={[{&(0x7f0000000000)="1a60de8c69d026f1c4f249bcb722248c61dfb23c533a11ebf9fb1c138eb7c998045b91710d281c72e74faf2dbf14a4bf9f08", 0x32, 0x3}, {&(0x7f0000000040)="49d3df7ec42f7a8ddb1aefe224b1fe1afac17273167983b62911fa619e6ac131b53d6b364400fdf25625ab1492d79b67b2c9177d226af86bf7a0d29dc7340176fa78c82ebfc95f070f45297788dfb9da2826960f086827a6379c006e08123718e696099bc52b1b5f7949c0dd4a8fe9f5c6cc811f7c2e1ef85eeaf5db3905482a9eb2154154492f60b91e35b38226614d0e2ace792250cde6e3555248700ea9e11e7ca7ccacace8280d75b79ea30f1a0b3af569ef364aef64a161094e17ee754eb78768", 0xc3, 0x3}, {&(0x7f0000000280)="9c4ed3006a6789e53475922d9e9b2f16815802119f5782873ab3215409005870f6d5e4765054272354f797b878ffea83c8b99382421ce3f59fb7f12a7e053f30db9286511c3be26808c05f7247231e627d3f4d71374260acbb7d7532ce06e86404745fc08b2d2fba24338585f18848aed34734782d596c0e3186", 0x7a, 0x3}, {&(0x7f0000000140)="073256f053a8b7e05ee5ee2347603e316a05542677cc6e6b2e519b40eeeb05c3133b1aad", 0x24, 0x2}, {&(0x7f0000000300)="f2513c41605301cfc524b6758e7f371c47766d4c5452b1fcb71976752ce632f79d0b51146096e0e7f66d97bdf5f554d7f354e589e970c44993e7227ada1cb8e4e800f39739374b491d585b00611b7e355c9b85c39070a81a323862f220123214fecb4c465a243f0aa2585c797c14679dee296144acfe2fb66c7c3e20393c973b3d2f9b7f45c38ce935a9f0749712ce9aa192d2b2ac390647c2da067be71bd961098d764f5643469529309939e810ab3af77095c3a3405ff7d1af43b900e3811702178a24328b4b9540aea26370975d0006481cecf9744fdaa524994c7bcd90c9a7c66be937ace4cc6e989a0510e3081e09d2b148e3890b4f", 0xf8, 0x2}, {&(0x7f0000000200)="573c0714390d0358b056678ecd51e9c20ace5fac59bef87097c27daa90f532950fa42d15b35ac142e190ff54", 0x2c, 0x3}, {&(0x7f0000000400)="84f7db9fd02c0d3b6efdefabb504d03e9253c46d09c411", 0x17, 0x1}]}, 0x7, 0x2}, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:06:30 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x5) r0 = syz_io_uring_setup(0x42c3, &(0x7f0000000000)={0x0, 0x8272, 0x8, 0x1, 0x2f6}, &(0x7f00000000c0), &(0x7f0000000100)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) r1 = socket(0x18, 0x0, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000012c0)=[{0x2, 0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000440)=""/69, 0x45}], &(0x7f0000000500)=[0x9, 0x400]}, {0x9, 0x1, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)=""/147, 0x93}, {&(0x7f0000000540)=""/71, 0x47}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/80, 0x50}, {&(0x7f0000000900)=""/138, 0x8a}, {&(0x7f00000009c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/184, 0xb8}, {&(0x7f0000000ac0)=""/73, 0x49}], &(0x7f0000000c00)=[0x6, 0x8, 0xde, 0x4, 0x8001]}, {0x2, 0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/189, 0xbd}, {&(0x7f0000000d00)=""/103, 0x67}], &(0x7f0000000dc0)=[0x65, 0x8000000000000000, 0x6, 0x3ff, 0x2, 0x3, 0xfff]}, {0x5, 0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e00)=""/22, 0x16}, {&(0x7f0000000e40)=""/186, 0xba}, {&(0x7f0000000f00)=""/247, 0xf7}, {&(0x7f0000001000)=""/237, 0xed}, {&(0x7f0000001100)=""/196, 0xc4}], &(0x7f0000001280)=[0x1f, 0x2, 0x2e6, 0x2e, 0x8001, 0x729]}], 0x4) bind$isdn(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48094}, 0x20000840) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1) r4 = io_uring_setup(0xf61, &(0x7f0000000100)={0x0, 0x17a7, 0x400, 0x0, 0x8, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) socket(0x18, 0x0, 0x2) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000012c0)=[{0x2, 0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000440)=""/69, 0x45}], &(0x7f0000000500)=[0x9, 0x400]}, {0x9, 0x1, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)=""/147, 0x93}, {&(0x7f0000000540)=""/71, 0x47}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/80, 0x50}, {&(0x7f0000000900)=""/138, 0x8a}, {&(0x7f00000009c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/184, 0xb8}, {&(0x7f0000000ac0)=""/73, 0x49}], &(0x7f0000000c00)=[0x6, 0x8, 0xde, 0x4, 0x8001]}, {0x2, 0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/189, 0xbd}, {&(0x7f0000000d00)=""/103, 0x67}], &(0x7f0000000dc0)=[0x65, 0x8000000000000000, 0x6, 0x3ff, 0x2, 0x3, 0xfff]}, {0x5, 0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e00)=""/22, 0x16}, {&(0x7f0000000e40)=""/186, 0xba}, {&(0x7f0000000f00)=""/247, 0xf7}, {&(0x7f0000001000)=""/237, 0xed}, {&(0x7f0000001100)=""/196, 0xc4}], &(0x7f0000001280)=[0x1f, 0x2, 0x2e6, 0x2e, 0x8001, 0x729]}], 0x4) (async) bind$isdn(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48094}, 0x20000840) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1) (async) io_uring_setup(0xf61, &(0x7f0000000100)={0x0, 0x17a7, 0x400, 0x0, 0x8, 0x0, r0}) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) (async) 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async, rerun: 32) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000440)={&(0x7f0000001000)={[{&(0x7f0000000000)="1a60de8c69d026f1c4f249bcb722248c61dfb23c533a11ebf9fb1c138eb7c998045b91710d281c72e74faf2dbf14a4bf9f08", 0x32, 0x3}, {&(0x7f0000000040)="49d3df7ec42f7a8ddb1aefe224b1fe1afac17273167983b62911fa619e6ac131b53d6b364400fdf25625ab1492d79b67b2c9177d226af86bf7a0d29dc7340176fa78c82ebfc95f070f45297788dfb9da2826960f086827a6379c006e08123718e696099bc52b1b5f7949c0dd4a8fe9f5c6cc811f7c2e1ef85eeaf5db3905482a9eb2154154492f60b91e35b38226614d0e2ace792250cde6e3555248700ea9e11e7ca7ccacace8280d75b79ea30f1a0b3af569ef364aef64a161094e17ee754eb78768", 0xc3, 0x3}, {&(0x7f0000000280)="9c4ed3006a6789e53475922d9e9b2f16815802119f5782873ab3215409005870f6d5e4765054272354f797b878ffea83c8b99382421ce3f59fb7f12a7e053f30db9286511c3be26808c05f7247231e627d3f4d71374260acbb7d7532ce06e86404745fc08b2d2fba24338585f18848aed34734782d596c0e3186", 0x7a, 0x3}, {&(0x7f0000000140)="073256f053a8b7e05ee5ee2347603e316a05542677cc6e6b2e519b40eeeb05c3133b1aad", 0x24, 0x2}, {&(0x7f0000000300)="f2513c41605301cfc524b6758e7f371c47766d4c5452b1fcb71976752ce632f79d0b51146096e0e7f66d97bdf5f554d7f354e589e970c44993e7227ada1cb8e4e800f39739374b491d585b00611b7e355c9b85c39070a81a323862f220123214fecb4c465a243f0aa2585c797c14679dee296144acfe2fb66c7c3e20393c973b3d2f9b7f45c38ce935a9f0749712ce9aa192d2b2ac390647c2da067be71bd961098d764f5643469529309939e810ab3af77095c3a3405ff7d1af43b900e3811702178a24328b4b9540aea26370975d0006481cecf9744fdaa524994c7bcd90c9a7c66be937ace4cc6e989a0510e3081e09d2b148e3890b4f", 0xf8, 0x2}, {&(0x7f0000000200)="573c0714390d0358b056678ecd51e9c20ace5fac59bef87097c27daa90f532950fa42d15b35ac142e190ff54", 0x2c, 0x3}, {&(0x7f0000000400)="84f7db9fd02c0d3b6efdefabb504d03e9253c46d09c411", 0x17, 0x1}]}, 0x7, 0x2}, 0x1) (rerun: 32) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) (async) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000440)={&(0x7f0000001000)={[{&(0x7f0000000000)="1a60de8c69d026f1c4f249bcb722248c61dfb23c533a11ebf9fb1c138eb7c998045b91710d281c72e74faf2dbf14a4bf9f08", 0x32, 0x3}, {&(0x7f0000000040)="49d3df7ec42f7a8ddb1aefe224b1fe1afac17273167983b62911fa619e6ac131b53d6b364400fdf25625ab1492d79b67b2c9177d226af86bf7a0d29dc7340176fa78c82ebfc95f070f45297788dfb9da2826960f086827a6379c006e08123718e696099bc52b1b5f7949c0dd4a8fe9f5c6cc811f7c2e1ef85eeaf5db3905482a9eb2154154492f60b91e35b38226614d0e2ace792250cde6e3555248700ea9e11e7ca7ccacace8280d75b79ea30f1a0b3af569ef364aef64a161094e17ee754eb78768", 0xc3, 0x3}, {&(0x7f0000000280)="9c4ed3006a6789e53475922d9e9b2f16815802119f5782873ab3215409005870f6d5e4765054272354f797b878ffea83c8b99382421ce3f59fb7f12a7e053f30db9286511c3be26808c05f7247231e627d3f4d71374260acbb7d7532ce06e86404745fc08b2d2fba24338585f18848aed34734782d596c0e3186", 0x7a, 0x3}, {&(0x7f0000000140)="073256f053a8b7e05ee5ee2347603e316a05542677cc6e6b2e519b40eeeb05c3133b1aad", 0x24, 0x2}, {&(0x7f0000000300)="f2513c41605301cfc524b6758e7f371c47766d4c5452b1fcb71976752ce632f79d0b51146096e0e7f66d97bdf5f554d7f354e589e970c44993e7227ada1cb8e4e800f39739374b491d585b00611b7e355c9b85c39070a81a323862f220123214fecb4c465a243f0aa2585c797c14679dee296144acfe2fb66c7c3e20393c973b3d2f9b7f45c38ce935a9f0749712ce9aa192d2b2ac390647c2da067be71bd961098d764f5643469529309939e810ab3af77095c3a3405ff7d1af43b900e3811702178a24328b4b9540aea26370975d0006481cecf9744fdaa524994c7bcd90c9a7c66be937ace4cc6e989a0510e3081e09d2b148e3890b4f", 0xf8, 0x2}, {&(0x7f0000000200)="573c0714390d0358b056678ecd51e9c20ace5fac59bef87097c27daa90f532950fa42d15b35ac142e190ff54", 0x2c, 0x3}, {&(0x7f0000000400)="84f7db9fd02c0d3b6efdefabb504d03e9253c46d09c411", 0x17, 0x1}]}, 0x7, 0x2}, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1857.163216][ T6577] FAULT_INJECTION: forcing a failure. [ 1857.163216][ T6577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1857.176421][ T6577] CPU: 1 PID: 6577 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1857.186822][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1857.196973][ T6577] Call Trace: [ 1857.200293][ T6577] [ 1857.203278][ T6577] dump_stack_lvl+0xda/0x130 [ 1857.207979][ T6577] dump_stack+0x15/0x20 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) [ 1857.212164][ T6577] should_fail_ex+0x21f/0x230 [ 1857.216936][ T6577] should_fail+0xb/0x10 [ 1857.221140][ T6577] should_fail_usercopy+0x1a/0x20 [ 1857.226269][ T6577] _copy_from_user+0x1e/0xd0 [ 1857.230972][ T6577] io_copy_iov+0x71/0x130 [ 1857.235338][ T6577] io_sqe_buffers_register+0x15e/0x3a0 [ 1857.240900][ T6577] __se_sys_io_uring_register+0x936/0x10e0 [ 1857.246734][ T6577] __x64_sys_io_uring_register+0x55/0x60 [ 1857.252415][ T6577] do_syscall_64+0xcd/0x1d0 [ 1857.257113][ T6577] entry_SYSCALL_64_after_hwframe+0x63/0x6b 00:06:30 executing program 2: syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) (async, rerun: 64) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 00:06:30 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x5) r0 = syz_io_uring_setup(0x42c3, &(0x7f0000000000)={0x0, 0x8272, 0x8, 0x1, 0x2f6}, &(0x7f00000000c0), &(0x7f0000000100)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x5) (async) syz_io_uring_setup(0x42c3, &(0x7f0000000000)={0x0, 0x8272, 0x8, 0x1, 0x2f6}, &(0x7f00000000c0), &(0x7f0000000100)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) (async) [ 1857.263064][ T6577] RIP: 0033:0x7feeab59eda9 [ 1857.267487][ T6577] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1857.287194][ T6577] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1857.295642][ T6577] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1857.303648][ T6577] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) socket(0x18, 0x0, 0x2) (async) r1 = socket(0x18, 0x0, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000012c0)=[{0x2, 0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000440)=""/69, 0x45}], &(0x7f0000000500)=[0x9, 0x400]}, {0x9, 0x1, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)=""/147, 0x93}, {&(0x7f0000000540)=""/71, 0x47}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/80, 0x50}, {&(0x7f0000000900)=""/138, 0x8a}, {&(0x7f00000009c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/184, 0xb8}, {&(0x7f0000000ac0)=""/73, 0x49}], &(0x7f0000000c00)=[0x6, 0x8, 0xde, 0x4, 0x8001]}, {0x2, 0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/189, 0xbd}, {&(0x7f0000000d00)=""/103, 0x67}], &(0x7f0000000dc0)=[0x65, 0x8000000000000000, 0x6, 0x3ff, 0x2, 0x3, 0xfff]}, {0x5, 0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e00)=""/22, 0x16}, {&(0x7f0000000e40)=""/186, 0xba}, {&(0x7f0000000f00)=""/247, 0xf7}, {&(0x7f0000001000)=""/237, 0xed}, {&(0x7f0000001100)=""/196, 0xc4}], &(0x7f0000001280)=[0x1f, 0x2, 0x2e6, 0x2e, 0x8001, 0x729]}], 0x4) bind$isdn(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48094}, 0x20000840) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1) r4 = io_uring_setup(0xf61, &(0x7f0000000100)={0x0, 0x17a7, 0x400, 0x0, 0x8, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x10ae, 0x0, 0x3a7}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)={0x0, 0x0, 0x800, 0xfffffffd, 0x4}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) 00:06:30 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x5) (async) r0 = syz_io_uring_setup(0x42c3, &(0x7f0000000000)={0x0, 0x8272, 0x8, 0x1, 0x2f6}, &(0x7f00000000c0), &(0x7f0000000100)) (async) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) [ 1857.311715][ T6577] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1857.319794][ T6577] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000002 [ 1857.327788][ T6577] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1857.335883][ T6577] 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x608f, &(0x7f0000000200), &(0x7f0000003c40)=0x0, &(0x7f0000006480)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/144, 0x90}, {&(0x7f0000000140)=""/28, 0x1c}], 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x9, &(0x7f00000000c0)={0x0, 0x3938700}, 0x1, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 00:06:30 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 16) 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)={0x0, 0x0, 0x800, 0xfffffffd, 0x4}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) 00:06:30 executing program 2: syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x10ae, 0x0, 0x3a7}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x10ae, 0x0, 0x3a7}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x608f, &(0x7f0000000200), &(0x7f0000003c40)=0x0, &(0x7f0000006480)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/144, 0x90}, {&(0x7f0000000140)=""/28, 0x1c}], 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x9, &(0x7f00000000c0)={0x0, 0x3938700}, 0x1, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_io_uring_setup(0x608f, &(0x7f0000000200), &(0x7f0000003c40), &(0x7f0000006480)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0), 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/144, 0x90}, {&(0x7f0000000140)=""/28, 0x1c}], 0x2) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x9, &(0x7f00000000c0)={0x0, 0x3938700}, 0x1, 0x0, 0x1}) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) (async) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x608f, &(0x7f0000000200), &(0x7f0000003c40)=0x0, &(0x7f0000006480)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0), 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/144, 0x90}, {&(0x7f0000000140)=""/28, 0x1c}], 0x2) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x9, &(0x7f00000000c0)={0x0, 0x3938700}, 0x1, 0x0, 0x1}) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 1857.407416][ T6634] FAULT_INJECTION: forcing a failure. [ 1857.407416][ T6634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1857.420640][ T6634] CPU: 1 PID: 6634 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1857.431005][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1857.441094][ T6634] Call Trace: [ 1857.444403][ T6634] [ 1857.447426][ T6634] dump_stack_lvl+0xda/0x130 [ 1857.452063][ T6634] dump_stack+0x15/0x20 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000180)={0x0, 0x45e8, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = io_uring_setup(0x5056, &(0x7f0000000100)={0x0, 0xd4e1, 0x4, 0x3, 0x25a}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000300)=""/198, 0xc6}], 0x2) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x906f, 0x40, 0x3, 0x287, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000480)) 00:06:30 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9b8}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5db}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x10ae, 0x0, 0x3a7}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1857.456347][ T6634] should_fail_ex+0x21f/0x230 [ 1857.461123][ T6634] should_fail+0xb/0x10 [ 1857.465335][ T6634] should_fail_usercopy+0x1a/0x20 [ 1857.470409][ T6634] _copy_from_user+0x1e/0xd0 [ 1857.475062][ T6634] io_copy_iov+0x71/0x130 [ 1857.479482][ T6634] io_sqe_buffers_register+0x15e/0x3a0 [ 1857.485025][ T6634] __se_sys_io_uring_register+0x936/0x10e0 [ 1857.490893][ T6634] __x64_sys_io_uring_register+0x55/0x60 [ 1857.496576][ T6634] do_syscall_64+0xcd/0x1d0 [ 1857.501128][ T6634] entry_SYSCALL_64_after_hwframe+0x63/0x6b 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) clock_gettime(0x1, &(0x7f0000000100)) 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) clock_gettime(0x1, &(0x7f0000000100)) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000180)={0x0, 0x45e8, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) r1 = io_uring_setup(0x5056, &(0x7f0000000100)={0x0, 0xd4e1, 0x4, 0x3, 0x25a}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000300)=""/198, 0xc6}], 0x2) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x906f, 0x40, 0x3, 0x287, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000480)) [ 1857.507141][ T6634] RIP: 0033:0x7feeab59eda9 [ 1857.511641][ T6634] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1857.531307][ T6634] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1857.539758][ T6634] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1857.547831][ T6634] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 00:06:30 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9b8}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5db}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000180)={0x0, 0x45e8, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) r1 = io_uring_setup(0x5056, &(0x7f0000000100)={0x0, 0xd4e1, 0x4, 0x3, 0x25a}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000300)=""/198, 0xc6}], 0x2) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x906f, 0x40, 0x3, 0x287, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000480)) (rerun: 64) 00:06:30 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)={0x0, 0x0, 0x800, 0xfffffffd, 0x4}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) clock_gettime(0x1, &(0x7f0000000100)) syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) clock_gettime(0x1, &(0x7f0000000100)) (async) 00:06:30 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 17) [ 1857.555896][ T6634] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1857.563912][ T6634] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000002 [ 1857.571931][ T6634] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1857.579946][ T6634] 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x3ab9}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1) 00:06:30 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x33, 0x1, 0x5, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0]}, 0x40) r0 = syz_open_dev$rtc(&(0x7f00000001c0), 0x7fffffffffffffff, 0x240000) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = io_uring_setup(0x193e, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80), 0x0) connect$l2tp6(r3, &(0x7f0000000200)={0xa, 0x0, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb70f, 0x4}, 0x20) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x80010, r3, 0x0) syz_io_uring_setup(0x2909, &(0x7f0000000280)={0x0, 0x9bf1, 0x100, 0x1, 0xc8, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000340)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r1, &(0x7f0000000380)={0x3}, r0, 0x3, 0x0, 0x1, {0x0, r7}}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000540)=[r0], 0x1) [ 1857.640122][ T6679] FAULT_INJECTION: forcing a failure. [ 1857.640122][ T6679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1857.653343][ T6679] CPU: 1 PID: 6679 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1857.663720][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1857.673814][ T6679] Call Trace: [ 1857.677115][ T6679] [ 1857.680064][ T6679] dump_stack_lvl+0xda/0x130 [ 1857.684791][ T6679] dump_stack+0x15/0x20 [ 1857.688982][ T6679] should_fail_ex+0x21f/0x230 [ 1857.693696][ T6679] should_fail+0xb/0x10 [ 1857.697971][ T6679] should_fail_usercopy+0x1a/0x20 [ 1857.703039][ T6679] _copy_from_user+0x1e/0xd0 [ 1857.707850][ T6679] io_copy_iov+0x71/0x130 [ 1857.712304][ T6679] io_sqe_buffers_register+0x15e/0x3a0 [ 1857.717847][ T6679] __se_sys_io_uring_register+0x936/0x10e0 [ 1857.723826][ T6679] __x64_sys_io_uring_register+0x55/0x60 [ 1857.729530][ T6679] do_syscall_64+0xcd/0x1d0 [ 1857.734082][ T6679] entry_SYSCALL_64_after_hwframe+0x63/0x6b 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/100, 0x64}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/100, 0x64}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x3ab9}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1) 00:06:30 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/100, 0x64}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:30 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4001053, r0, 0x0) r1 = syz_io_uring_setup(0x4483, &(0x7f0000000140)={0x0, 0x6384, 0x2, 0x3, 0x177, 0x0, r0}, &(0x7f0000000080), &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xa920, 0x400, 0x2000, 0x4, 0x0, r1}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) 00:06:30 executing program 2: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0x3ab9}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1) 00:06:30 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4001053, r0, 0x0) (async) r1 = syz_io_uring_setup(0x4483, &(0x7f0000000140)={0x0, 0x6384, 0x2, 0x3, 0x177, 0x0, r0}, &(0x7f0000000080), &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xa920, 0x400, 0x2000, 0x4, 0x0, r1}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) 00:06:30 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) r1 = syz_io_uring_setup(0x47b8, &(0x7f0000000000)={0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1857.740004][ T6679] RIP: 0033:0x7feeab59eda9 [ 1857.744576][ T6679] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1857.764264][ T6679] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1857.772825][ T6679] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1857.780826][ T6679] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 00:06:31 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4001053, r0, 0x0) r1 = syz_io_uring_setup(0x4483, &(0x7f0000000140)={0x0, 0x6384, 0x2, 0x3, 0x177, 0x0, r0}, &(0x7f0000000080), &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x47b6, &(0x7f0000000000)={0x0, 0xa920, 0x400, 0x2000, 0x4, 0x0, r1}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) 00:06:31 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9b8}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5db}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) 00:06:31 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) (async) r1 = syz_io_uring_setup(0x47b8, &(0x7f0000000000)={0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:31 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x33, 0x1, 0x5, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0]}, 0x40) r0 = syz_open_dev$rtc(&(0x7f00000001c0), 0x7fffffffffffffff, 0x240000) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = io_uring_setup(0x193e, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80), 0x0) connect$l2tp6(r3, &(0x7f0000000200)={0xa, 0x0, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb70f, 0x4}, 0x20) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x80010, r3, 0x0) syz_io_uring_setup(0x2909, &(0x7f0000000280)={0x0, 0x9bf1, 0x100, 0x1, 0xc8, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000340)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r1, &(0x7f0000000380)={0x3}, r0, 0x3, 0x0, 0x1, {0x0, r7}}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000540)=[r0], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x33, 0x1, 0x5, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0]}, 0x40) (async) syz_open_dev$rtc(&(0x7f00000001c0), 0x7fffffffffffffff, 0x240000) (async) ioctl$RTC_UIE_OFF(r0, 0x7004) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) io_uring_setup(0x193e, &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80), 0x0) (async) connect$l2tp6(r3, &(0x7f0000000200)={0xa, 0x0, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb70f, 0x4}, 0x20) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x80010, r3, 0x0) (async) syz_io_uring_setup(0x2909, &(0x7f0000000280)={0x0, 0x9bf1, 0x100, 0x1, 0xc8, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000340)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r1, &(0x7f0000000380)={0x3}, r0, 0x3, 0x0, 0x1, {0x0, r7}}) (async) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000540)=[r0], 0x1) (async) 00:06:31 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/225, 0xe1}], 0x3) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) 00:06:31 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 18) [ 1857.788858][ T6679] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1857.796974][ T6679] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000002 [ 1857.805000][ T6679] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1857.813030][ T6679] 00:06:31 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) r1 = syz_io_uring_setup(0x47b8, &(0x7f0000000000)={0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:31 executing program 1: r0 = syz_io_uring_setup(0x6d1f, &(0x7f0000000000)={0x0, 0x8e91, 0x40, 0x2, 0x6}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0x0) 00:06:31 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x33, 0x1, 0x5, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0]}, 0x40) (async) r0 = syz_open_dev$rtc(&(0x7f00000001c0), 0x7fffffffffffffff, 0x240000) ioctl$RTC_UIE_OFF(r0, 0x7004) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = io_uring_setup(0x193e, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000e80), 0x0) (async) connect$l2tp6(r3, &(0x7f0000000200)={0xa, 0x0, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb70f, 0x4}, 0x20) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x80010, r3, 0x0) (async) syz_io_uring_setup(0x2909, &(0x7f0000000280)={0x0, 0x9bf1, 0x100, 0x1, 0xc8, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000340)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r1, &(0x7f0000000380)={0x3}, r0, 0x3, 0x0, 0x1, {0x0, r7}}) (async) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000540)=[r0], 0x1) 00:06:31 executing program 2: r0 = io_uring_setup(0x1, &(0x7f0000000100)={0x0, 0x1bd2, 0x8f6057488d501875, 0x3, 0x155}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/166, 0xa6}], &(0x7f0000000280)=[0x80, 0x4, 0x1ff]}, 0x20) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:31 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/225, 0xe1}], 0x3) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) 00:06:31 executing program 1: r0 = syz_io_uring_setup(0x6d1f, &(0x7f0000000000)={0x0, 0x8e91, 0x40, 0x2, 0x6}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0x0) 00:06:31 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) r1 = syz_io_uring_setup(0x4e5b, &(0x7f00000009c0)={0x0, 0x0, 0x800, 0x0, 0x40001c3}, &(0x7f0000000080), &(0x7f0000000200)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) r3 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000000980)={0x6, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000200)}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/212, 0xd4}, {&(0x7f0000000840)=""/49, 0x31}], &(0x7f0000000940)=[0x4, 0xcc, 0x0, 0xff, 0x4, 0x4, 0xced], 0x9}, 0x20) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000e80), 0x0) 00:06:31 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/225, 0xe1}], 0x3) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) [ 1857.921637][ T6728] FAULT_INJECTION: forcing a failure. [ 1857.921637][ T6728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1857.934825][ T6728] CPU: 0 PID: 6728 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1857.945209][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1857.955388][ T6728] Call Trace: [ 1857.958712][ T6728] [ 1857.961687][ T6728] dump_stack_lvl+0xda/0x130 [ 1857.966309][ T6728] dump_stack+0x15/0x20 00:06:31 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0xb, 0x200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r2, r1, r4, r5], 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:31 executing program 2: r0 = io_uring_setup(0x1, &(0x7f0000000100)={0x0, 0x1bd2, 0x8f6057488d501875, 0x3, 0x155}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/166, 0xa6}], &(0x7f0000000280)=[0x80, 0x4, 0x1ff]}, 0x20) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) [ 1857.970498][ T6728] should_fail_ex+0x21f/0x230 [ 1857.975338][ T6728] should_fail+0xb/0x10 [ 1857.979589][ T6728] should_fail_usercopy+0x1a/0x20 [ 1857.984724][ T6728] _copy_from_user+0x1e/0xd0 [ 1857.989425][ T6728] io_copy_iov+0x71/0x130 [ 1857.993825][ T6728] io_sqe_buffers_register+0x15e/0x3a0 [ 1857.999401][ T6728] __se_sys_io_uring_register+0x936/0x10e0 [ 1858.005302][ T6728] __x64_sys_io_uring_register+0x55/0x60 [ 1858.011115][ T6728] do_syscall_64+0xcd/0x1d0 [ 1858.015676][ T6728] entry_SYSCALL_64_after_hwframe+0x63/0x6b 00:06:31 executing program 1: r0 = syz_io_uring_setup(0x6d1f, &(0x7f0000000000)={0x0, 0x8e91, 0x40, 0x2, 0x6}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0x0) [ 1858.021607][ T6728] RIP: 0033:0x7feeab59eda9 [ 1858.026116][ T6728] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1858.045761][ T6728] RSP: 002b:00007feeaa9200c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1858.054309][ T6728] RAX: ffffffffffffffda RBX: 00007feeab6ccf80 RCX: 00007feeab59eda9 [ 1858.062335][ T6728] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 00:06:31 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_setup(0x248f, &(0x7f0000000600)={0x0, 0xe9d7, 0x1000, 0x2, 0xe7}, &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_io_uring_setup(0x5bfb, &(0x7f0000000700)={0x0, 0x3174, 0x800, 0x3, 0x2b0, 0x0, r1}, &(0x7f0000000780), &(0x7f00000007c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000840)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r1, 0x0, &(0x7f0000000800)='./file0\x00', 0x0, 0x12080, 0x12345, {0x0, r5}}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x168, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4c0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x95}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffbff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x9a5b02f26cfcf9f5}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x174, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x84}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfa3}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000881}, 0x24000815) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r6 = syz_io_uring_setup(0x6cd6, &(0x7f0000000880)={0x0, 0x6bb8, 0x400, 0x1, 0x200}, &(0x7f0000000900), &(0x7f0000000940)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000980)=[@ioring_restriction_sqe_op={0x1, 0x18}, @ioring_restriction_register_op={0x0, 0x16}, @ioring_restriction_sqe_flags_required, @ioring_restriction_register_op={0x0, 0x3}], 0x4) 00:06:31 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) r1 = syz_io_uring_setup(0x4e5b, &(0x7f00000009c0)={0x0, 0x0, 0x800, 0x0, 0x40001c3}, &(0x7f0000000080), &(0x7f0000000200)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) (async) r3 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000000980)={0x6, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000200)}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/212, 0xd4}, {&(0x7f0000000840)=""/49, 0x31}], &(0x7f0000000940)=[0x4, 0xcc, 0x0, 0xff, 0x4, 0x4, 0xced], 0x9}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000e80), 0x0) [ 1858.070392][ T6728] RBP: 00007feeaa920120 R08: 0000000000000000 R09: 0000000000000000 [ 1858.078394][ T6728] R10: 10000000000000fb R11: 0000000000000246 R12: 0000000000000002 [ 1858.086418][ T6728] R13: 000000000000000b R14: 00007feeab6ccf80 R15: 00007ffe13e88e98 [ 1858.094476][ T6728] 00:06:31 executing program 2: r0 = io_uring_setup(0x1, &(0x7f0000000100)={0x0, 0x1bd2, 0x8f6057488d501875, 0x3, 0x155}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/166, 0xa6}], &(0x7f0000000280)=[0x80, 0x4, 0x1ff]}, 0x20) (async) r1 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) 00:06:31 executing program 0: r0 = syz_io_uring_setup(0x2af9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x10000000000000fb) (fail_nth: 19) 00:06:31 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_setup(0x248f, &(0x7f0000000600)={0x0, 0xe9d7, 0x1000, 0x2, 0xe7}, &(0x7f0000000680)=0x0, &(0x7f00000006c0)) (async) syz_io_uring_setup(0x5bfb, &(0x7f0000000700)={0x0, 0x3174, 0x800, 0x3, 0x2b0, 0x0, r1}, &(0x7f0000000780), &(0x7f00000007c0)=0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000840)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r1, 0x0, &(0x7f0000000800)='./file0\x00', 0x0, 0x12080, 0x12345, {0x0, r5}}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x168, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4c0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x95}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffbff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x9a5b02f26cfcf9f5}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x174, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x84}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfa3}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000881}, 0x24000815) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r6 = syz_io_uring_setup(0x6cd6, &(0x7f0000000880)={0x0, 0x6bb8, 0x400, 0x1, 0x200}, &(0x7f0000000900), &(0x7f0000000940)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000980)=[@ioring_restriction_sqe_op={0x1, 0x18}, @ioring_restriction_register_op={0x0, 0x16}, @ioring_restriction_sqe_flags_required, @ioring_restriction_register_op={0x0, 0x3}], 0x4) 00:06:31 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0xb, 0x200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r2, r1, r4, r5], 0x4) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 1858.171826][ T6767] FAULT_INJECTION: forcing a failure. [ 1858.171826][ T6767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1858.185041][ T6767] CPU: 1 PID: 6767 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 1858.195403][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1858.205509][ T6767] Call Trace: [ 1858.208837][ T6767] [ 1858.211795][ T6767] dump_stack_lvl+0xda/0x130 [ 1858.216458][ T6767] dump_stack+0x15/0x20 00:06:31 executing program 3: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x0, 0x1}, 0x20) (async) r1 = syz_io_uring_setup(0x4e5b, &(0x7f00000009c0)={0x0, 0x0, 0x800, 0x0, 0x40001c3}, &(0x7f0000000080), &(0x7f0000000200)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) (async) r3 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000000980)={0x6, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000200)}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/212, 0xd4}, {&(0x7f0000000840)=""/49, 0x31}], &(0x7f0000000940)=[0x4, 0xcc, 0x0, 0xff, 0x4, 0x4, 0xced], 0x9}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000e80), 0x0) 00:06:31 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) 00:06:31 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) 00:06:31 executing program 2: r0 = syz_io_uring_setup(0x43d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) io_uring_setup(0x7a58, &(0x7f0000000100)={0x0, 0xc3f1, 0x800, 0x0, 0x363, 0x0, r0}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1c) 00:06:31 executing program 4: r0 = syz_io_uring_setup(0x47b6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2e0140, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0xb, 0x200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r2, r1, r4, r5], 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x10000000000001cd) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:06:31 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e80), 0x0) [ 1858.220694][ T6767] should_fail_ex+0x21f/0x230 [ 1858.225490][ T6767] should_fail+0xb/0x10 [ 1858.229729][ T6767] should_fail_usercopy+0x1a/0x20 [ 1858.234790][ T6767] _copy_from_user+0x1e/0xd0 [ 1858.239509][ T6767] io_copy_iov+0x71/0x130 [ 1858.243886][ T6767] io_sqe_buffers_register+0x15e/0x3a0 [ 1858.249490][ T6767] __se_sys_io_uring_register+0x936/0x10e0 [ 1858.255336][ T6767] __x64_sys_io_uring_register+0x55/0x60 [ 1858.261020][ T6767] do_syscall_64+0xcd/0x1d0 [ 1858.265601][ T6767] ? switch_fpu_return+0xe/0x10 00:06:31 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_io_uring_setup(0x248f, &(0x7f0000000600)={0x0, 0xe9d7, 0x1000, 0x2, 0xe7}, &(0x7f0000000680)=0x0, &(0x7f00000006c0)) (async) syz_io_uring_setup(0x5bfb, &(0x7f0000000700)={0x0, 0x3174, 0x800, 0x3, 0x2b0, 0x0, r1}, &(0x7f0000000780), &(0x7f00000007c0)=0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000840)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r1, 0x0, &(0x7f0000000800)='./file0\x00', 0x0, 0x12080, 0x12345, {0x0, r5}}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x168, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4c0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x95}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffbff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x9a5b02f26cfcf9f5}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x174, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x84}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfa3}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000881}, 0x24000815) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) r6 = syz_io_uring_setup(0x6cd6, &(0x7f0000000880)={0x0, 0x6bb8, 0x400, 0x1, 0x200}, &(0x7f0000000900), &(0x7f0000000940)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000980)=[@ioring_restriction_sqe_op={0x1, 0x18}, @ioring_restriction_register_op={0x0, 0x16}, @ioring_restriction_sqe_flags_required, @ioring_restriction_register_op={0x0, 0x3}], 0x4) 00:06:31 executing program 3: r0 = io_uring_setup(0x193e, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000000)="86fc6dd2f0ceab75491f33d7d79c09f3a766d89a33862b64ca5282", 0x1b) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r0], 0x400002a9) io_uring_