in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:12:52 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:12:52 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:12:52 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfa"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:13:04 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:13:04 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:13:04 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:04 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:13:04 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:13:04 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:13:04 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:13:04 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:04 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:04 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:13:04 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:19 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:13:19 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:19 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:13:19 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:13:19 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:13:19 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:13:19 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:19 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:19 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:20 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:20 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:13:20 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:13:20 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:20 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)

11:13:20 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:20 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:13:32 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:13:32 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:13:32 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:13:32 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)

11:13:32 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:32 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:13:32 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:13:32 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:13:32 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:45 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:13:45 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:13:45 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)

11:13:45 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:45 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:13:45 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:13:45 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:13:45 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:13:46 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:13:46 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:13:46 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:13:46 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[], 0x6)

11:13:46 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:13:46 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, 0x0)

11:13:46 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:13:46 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:13:46 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, 0x0)

11:13:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:13:46 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[], 0x6)

11:13:46 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:13:46 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:01 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, 0x0)

11:14:01 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

11:14:01 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:14:01 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[], 0x6)

11:14:01 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:01 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:14:01 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:14:01 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, 0x0)

11:14:17 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:14:17 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:17 executing program 7:
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:14:17 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:14:17 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:17 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)

11:14:17 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

11:14:17 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:17 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:14:17 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:14:17 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:17 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:17 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)

11:14:17 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:17 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:17 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:14:17 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:14:17 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

11:14:17 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:18 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:14:18 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:14:18 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:18 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:14:18 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:18 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:18 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)

11:14:18 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:14:33 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:14:33 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:14:33 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:14:33 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:14:33 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r1}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:14:33 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:14:33 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:33 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000), 0x2)

11:14:34 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:14:34 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:14:34 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:14:34 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:14:34 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:14:34 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:14:49 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:14:49 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:14:49 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r1}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:14:49 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:14:49 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:14:49 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:14:49 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:14:49 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000), 0x2)

11:15:04 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:15:04 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:15:04 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:15:04 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:04 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:04 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {r2, 0x408}, {r2, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r2, 0x8, 0x0, 0x8000)
openat(r2, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:04 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000), 0x2)

11:15:04 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:04 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:15:04 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:15:04 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:15:04 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:04 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:15:04 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:15:05 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:05 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:20 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:15:20 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:15:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000002a40)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:15:20 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:20 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:15:20 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:20 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:15:20 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:20 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:15:20 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:15:20 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000002a40))
socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {r2, 0x408}, {r2, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r2, 0x8, 0x0, 0x8000)
openat(r2, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:20 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:15:20 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:15:20 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:21 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:15:21 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:15:21 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:15:21 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:21 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000002a40)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:15:21 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:21 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:15:38 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:38 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000002a40)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r3}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:15:38 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:38 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:38 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:38 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:38 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:15:38 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:15:38 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:38 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:38 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:15:38 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:38 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:15:38 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:38 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:38 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:15:38 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:39 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:39 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:15:39 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:15:39 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:15:39 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:15:39 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:39 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:39 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:15:53 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:15:53 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:53 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6)

11:15:53 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:53 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:53 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:15:53 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:15:53 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:15:53 executing program 1:
r0 = syz_io_uring_setup(0x7f02, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:53 executing program 1:
r0 = syz_io_uring_setup(0x7f02, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:53 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)

11:15:53 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6)

11:15:53 executing program 1:
r0 = syz_io_uring_setup(0x7f02, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:54 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:15:54 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6)

11:15:54 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:05 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6)

11:16:05 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:05 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:16:05 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6)

11:16:05 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)

11:16:05 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:05 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:16:05 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)

11:16:05 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:06 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:06 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:06 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:06 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:06 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:16:06 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:06 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:19 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:19 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:16:19 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6)

11:16:19 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
bind$packet(r6, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:16:19 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:19 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:16:19 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:19 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:16:32 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:16:32 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:33 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
bind$packet(r5, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:16:33 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:16:33 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
bind$packet(r6, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:16:33 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:33 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)

11:16:33 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:33 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:16:46 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:46 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6)

11:16:46 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)

11:16:46 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:46 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:16:46 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)

11:16:46 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
bind$packet(r6, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

11:16:46 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:46 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:16:46 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:46 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:47 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:16:47 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:47 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:47 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6)

11:16:47 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)

11:16:47 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:16:47 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6)

11:16:47 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:16:47 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6)

11:16:47 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:47 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:16:47 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:16:47 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6)

11:16:48 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6)

11:17:01 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6)

11:17:01 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:01 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:01 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:01 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6)

11:17:01 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:01 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:01 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)

11:17:01 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:01 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:01 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:02 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:02 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:02 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:02 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:02 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:15 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r4, 0x8, 0x0, 0x8000)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:15 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:15 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:15 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:15 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:15 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)

11:17:15 executing program 6:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6)

11:17:15 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:15 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:15 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:15 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
bind$packet(r5, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:17:15 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:15 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6)

11:17:15 executing program 3:
r0 = syz_io_uring_setup(0x7f02, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:15 executing program 3:
r0 = syz_io_uring_setup(0x7f02, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:15 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:15 executing program 3:
r0 = syz_io_uring_setup(0x7f02, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:28 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(0x0, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:28 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14, 0x0, {0x0, r4}}, 0x3ff)

11:17:28 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:28 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:28 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:28 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:28 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:28 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:41 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:41 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(0x0, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:41 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:41 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:41 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:41 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:41 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:41 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:41 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:42 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:42 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:42 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:42 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r5}, {0xffffffffffffffff, 0x4}, {r4, 0x408}, {r4, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
openat(r4, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:42 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:42 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:42 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:42 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:55 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 1)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:17:55 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 1)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:17:55 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:55 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:55 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 1)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:55 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:17:55 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(0x0, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:17:55 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

[ 1902.958219] FAULT_INJECTION: forcing a failure.
[ 1902.958219] name failslab, interval 1, probability 0, space 0, times 1
[ 1902.961687] CPU: 1 PID: 9884 Comm: syz-executor.5 Not tainted 5.10.197 #1
[ 1902.963339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1902.965033] Call Trace:
[ 1902.965695]  dump_stack+0x107/0x167
[ 1902.966452]  should_fail.cold+0x5/0xa
[ 1902.967392]  should_failslab+0x5/0x20
[ 1902.968183]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1902.969104]  io_submit_sqes+0x6f76/0x85c0
[ 1902.969988]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1902.971006]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1902.972033]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1902.973037]  ? lock_downgrade+0x6d0/0x6d0
[ 1902.973898]  ? find_held_lock+0x2c/0x110
[ 1902.974738]  ? io_submit_sqes+0x85c0/0x85c0
[ 1902.975640]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1902.976633]  ? wait_for_completion_io+0x270/0x270
[ 1902.977640]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1902.978597]  ? vfs_write+0x354/0xa70
[ 1902.979374]  ? fput_many+0x2f/0x1a0
[ 1902.980123]  ? ksys_write+0x1a9/0x260
[ 1902.980907]  ? __ia32_sys_read+0xb0/0xb0
[ 1902.981759]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1902.982827]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1902.983888]  do_syscall_64+0x33/0x40
[ 1902.984653]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1902.985711] RIP: 0033:0x7fbd70499b19
[ 1902.986473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1902.990212] RSP: 002b:00007fbd6da0f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1902.991763] RAX: ffffffffffffffda RBX: 00007fbd705acf60 RCX: 00007fbd70499b19
[ 1902.993232] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1902.994689] RBP: 00007fbd6da0f1d0 R08: 0000000020000340 R09: 0000000000000008
[ 1902.996143] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1902.997601] R13: 00007ffcfc8cf88f R14: 00007fbd6da0f300 R15: 0000000000022000
[ 1903.004226] FAULT_INJECTION: forcing a failure.
[ 1903.004226] name failslab, interval 1, probability 0, space 0, times 0
[ 1903.005811] CPU: 0 PID: 9874 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 1903.006658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1903.007680] Call Trace:
[ 1903.008021]  dump_stack+0x107/0x167
[ 1903.008475]  should_fail.cold+0x5/0xa
[ 1903.008960]  should_failslab+0x5/0x20
[ 1903.009474]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1903.010046]  io_submit_sqes+0x6f76/0x85c0
[ 1903.010567]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1903.011175]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1903.011784]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1903.012393]  ? lock_downgrade+0x6d0/0x6d0
[ 1903.012900]  ? find_held_lock+0x2c/0x110
[ 1903.013400]  ? io_submit_sqes+0x85c0/0x85c0
[ 1903.013937]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1903.014600]  ? wait_for_completion_io+0x270/0x270
[ 1903.015275]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1903.015914]  ? vfs_write+0x354/0xa70
[ 1903.016440]  ? fput_many+0x2f/0x1a0
[ 1903.016958]  ? ksys_write+0x1a9/0x260
[ 1903.017494]  ? __ia32_sys_read+0xb0/0xb0
[ 1903.018076]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1903.018808]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1903.019549]  do_syscall_64+0x33/0x40
[ 1903.020076]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1903.020794] RIP: 0033:0x7f74447cdb19
[ 1903.021325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1903.023770] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1903.024777] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 1903.025730] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1903.026665] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 1903.027604] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1903.028541] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
[ 1903.033203] FAULT_INJECTION: forcing a failure.
[ 1903.033203] name failslab, interval 1, probability 0, space 0, times 0
[ 1903.035906] CPU: 1 PID: 9873 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1903.037317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1903.039014] Call Trace:
[ 1903.039570]  dump_stack+0x107/0x167
[ 1903.040328]  should_fail.cold+0x5/0xa
[ 1903.041118]  should_failslab+0x5/0x20
[ 1903.041910]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1903.042831]  io_submit_sqes+0x6f76/0x85c0
[ 1903.043686]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1903.044690]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1903.045715]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1903.046701]  ? lock_downgrade+0x6d0/0x6d0
[ 1903.047542]  ? find_held_lock+0x2c/0x110
[ 1903.048372]  ? io_submit_sqes+0x85c0/0x85c0
[ 1903.049275]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1903.050259]  ? wait_for_completion_io+0x270/0x270
[ 1903.051238]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1903.052178]  ? vfs_write+0x354/0xa70
[ 1903.052945]  ? fput_many+0x2f/0x1a0
[ 1903.053702]  ? ksys_write+0x1a9/0x260
[ 1903.054473]  ? __ia32_sys_read+0xb0/0xb0
[ 1903.055303]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1903.056367]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1903.057430]  do_syscall_64+0x33/0x40
[ 1903.058192]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1903.059234] RIP: 0033:0x7f981e647b19
[ 1903.059994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1903.063738] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1903.065298] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1903.066752] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1903.068206] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1903.069679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1903.071129] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
[ 1903.083940] FAULT_INJECTION: forcing a failure.
[ 1903.083940] name failslab, interval 1, probability 0, space 0, times 0
[ 1903.085632] CPU: 0 PID: 9882 Comm: syz-executor.0 Not tainted 5.10.197 #1
[ 1903.086463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1903.087435] Call Trace:
[ 1903.087757]  dump_stack+0x107/0x167
[ 1903.088213]  should_fail.cold+0x5/0xa
[ 1903.088690]  should_failslab+0x5/0x20
[ 1903.089169]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1903.089737]  io_submit_sqes+0x6f76/0x85c0
[ 1903.090251]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1903.090861]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1903.091462]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1903.092044]  ? lock_downgrade+0x6d0/0x6d0
[ 1903.092529]  ? find_held_lock+0x2c/0x110
[ 1903.093015]  ? io_submit_sqes+0x85c0/0x85c0
[ 1903.093544]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1903.094121]  ? wait_for_completion_io+0x270/0x270
[ 1903.094720]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1903.095291]  ? vfs_write+0x354/0xa70
[ 1903.095750]  ? fput_many+0x2f/0x1a0
[ 1903.096200]  ? ksys_write+0x1a9/0x260
[ 1903.096667]  ? __ia32_sys_read+0xb0/0xb0
[ 1903.097185]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1903.097829]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1903.098460]  do_syscall_64+0x33/0x40
[ 1903.098934]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1903.099566] RIP: 0033:0x7f29628e2b19
[ 1903.100025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1903.102297] RSP: 002b:00007f295fe58188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1903.103233] RAX: ffffffffffffffda RBX: 00007f29629f5f60 RCX: 00007f29628e2b19
[ 1903.104107] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1903.104988] RBP: 00007f295fe581d0 R08: 0000000020000340 R09: 0000000000000008
[ 1903.105875] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1903.106753] R13: 00007fff54c1faaf R14: 00007f295fe58300 R15: 0000000000022000
11:17:56 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:56 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:56 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

[ 1903.247223] FAULT_INJECTION: forcing a failure.
[ 1903.247223] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 1903.249799] CPU: 0 PID: 9897 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1903.250583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1903.251506] Call Trace:
[ 1903.251817]  dump_stack+0x107/0x167
[ 1903.252238]  should_fail.cold+0x5/0xa
[ 1903.252672]  __alloc_pages_nodemask+0x182/0x600
[ 1903.253204]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 1903.253880]  alloc_pages_current+0x187/0x280
[ 1903.254366]  allocate_slab+0x26f/0x380
[ 1903.254802]  ___slab_alloc+0x470/0x700
[ 1903.255236]  ? io_submit_sqes+0x6f76/0x85c0
[ 1903.255732]  ? kmem_cache_alloc_bulk+0x1ec/0x320
[ 1903.256253]  kmem_cache_alloc_bulk+0x1ec/0x320
[ 1903.256761]  io_submit_sqes+0x6f76/0x85c0
[ 1903.257223]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1903.257773]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1903.258339]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1903.258886]  ? lock_downgrade+0x6d0/0x6d0
[ 1903.259349]  ? find_held_lock+0x2c/0x110
[ 1903.259833]  ? io_submit_sqes+0x85c0/0x85c0
[ 1903.260355]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1903.260932]  ? wait_for_completion_io+0x270/0x270
[ 1903.261510]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1903.262065]  ? vfs_write+0x354/0xa70
[ 1903.262512]  ? fput_many+0x2f/0x1a0
[ 1903.262942]  ? ksys_write+0x1a9/0x260
[ 1903.263400]  ? __ia32_sys_read+0xb0/0xb0
[ 1903.263876]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1903.264518]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1903.265125]  do_syscall_64+0x33/0x40
[ 1903.265580]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1903.266174] RIP: 0033:0x7f981e647b19
[ 1903.266601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1903.268758] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1903.269655] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1903.270471] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1903.271298] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1903.272130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1903.272960] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:17:56 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:17:56 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:17:56 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:08 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:08 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:08 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:18:08 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 2)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:08 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:18:08 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:18:08 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 2)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:18:08 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 2)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

[ 1915.461077] FAULT_INJECTION: forcing a failure.
[ 1915.461077] name failslab, interval 1, probability 0, space 0, times 0
[ 1915.463793] CPU: 0 PID: 9921 Comm: syz-executor.0 Not tainted 5.10.197 #1
[ 1915.465171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1915.466858] Call Trace:
[ 1915.467402]  dump_stack+0x107/0x167
[ 1915.468155]  should_fail.cold+0x5/0xa
[ 1915.468945]  ? create_object.isra.0+0x3a/0xa20
[ 1915.469903]  should_failslab+0x5/0x20
[ 1915.470681]  kmem_cache_alloc+0x5b/0x310
[ 1915.471521]  create_object.isra.0+0x3a/0xa20
[ 1915.472433]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1915.473477]  kmem_cache_alloc_bulk+0x168/0x320
[ 1915.474415]  io_submit_sqes+0x6f76/0x85c0
[ 1915.475263]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1915.476274]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1915.477294]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1915.478316]  ? lock_downgrade+0x6d0/0x6d0
[ 1915.479155]  ? find_held_lock+0x2c/0x110
[ 1915.479995]  ? io_submit_sqes+0x85c0/0x85c0
[ 1915.480886]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1915.481886]  ? wait_for_completion_io+0x270/0x270
[ 1915.482869]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1915.483809]  ? vfs_write+0x354/0xa70
[ 1915.484566]  ? fput_many+0x2f/0x1a0
[ 1915.485325]  ? ksys_write+0x1a9/0x260
[ 1915.486103]  ? __ia32_sys_read+0xb0/0xb0
[ 1915.486935]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1915.487995]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1915.489053]  do_syscall_64+0x33/0x40
[ 1915.489820]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1915.490852] RIP: 0033:0x7f29628e2b19
[ 1915.491616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1915.495318] RSP: 002b:00007f295fe58188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1915.496862] RAX: ffffffffffffffda RBX: 00007f29629f5f60 RCX: 00007f29628e2b19
[ 1915.498315] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1915.499755] RBP: 00007f295fe581d0 R08: 0000000020000340 R09: 0000000000000008
[ 1915.501187] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1915.502637] R13: 00007fff54c1faaf R14: 00007f295fe58300 R15: 0000000000022000
[ 1915.503913] FAULT_INJECTION: forcing a failure.
[ 1915.503913] name failslab, interval 1, probability 0, space 0, times 0
[ 1915.505315] CPU: 1 PID: 9929 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1915.506032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1915.506852] Call Trace:
[ 1915.507141]  dump_stack+0x107/0x167
[ 1915.507519]  should_fail.cold+0x5/0xa
[ 1915.507920]  ? create_object.isra.0+0x3a/0xa20
[ 1915.508377]  should_failslab+0x5/0x20
[ 1915.508775]  kmem_cache_alloc+0x5b/0x310
[ 1915.509181]  create_object.isra.0+0x3a/0xa20
[ 1915.509652]  kmemleak_alloc_percpu+0xa0/0x100
[ 1915.510099]  pcpu_alloc+0x4e2/0x1240
[ 1915.510501]  __percpu_counter_init+0x10d/0x2d0
[ 1915.510954]  io_uring_alloc_task_context+0xcc/0x6a0
[ 1915.511497]  ? io_sqe_buffer_register+0x13d0/0x13d0
[ 1915.512009]  ? find_held_lock+0x2c/0x110
[ 1915.512445]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1915.512926]  __io_uring_add_tctx_node+0x2c6/0x520
[ 1915.513439]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 1915.513964]  __do_sys_io_uring_enter+0x14de/0x1920
[ 1915.514476]  ? lock_downgrade+0x6d0/0x6d0
[ 1915.514889]  ? find_held_lock+0x2c/0x110
[ 1915.515320]  ? io_submit_sqes+0x85c0/0x85c0
[ 1915.515754]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1915.516260]  ? wait_for_completion_io+0x270/0x270
[ 1915.516741]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1915.517221]  ? vfs_write+0x354/0xa70
[ 1915.517609]  ? fput_many+0x2f/0x1a0
[ 1915.517986]  ? ksys_write+0x1a9/0x260
[ 1915.518383]  ? __ia32_sys_read+0xb0/0xb0
[ 1915.518810]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1915.519350]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1915.519890]  do_syscall_64+0x33/0x40
[ 1915.520275]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1915.520813] RIP: 0033:0x7f981e647b19
[ 1915.521195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1915.523085] RSP: 002b:00007f981bb9c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1915.523864] RAX: ffffffffffffffda RBX: 00007f981e75b020 RCX: 00007f981e647b19
[ 1915.524603] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1915.525355] RBP: 00007f981bb9c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1915.526102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1915.526830] R13: 00007ffe21ce487f R14: 00007f981bb9c300 R15: 0000000000022000
[ 1915.529803] FAULT_INJECTION: forcing a failure.
[ 1915.529803] name failslab, interval 1, probability 0, space 0, times 0
[ 1915.530997] CPU: 1 PID: 9927 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 1915.531703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1915.532559] Call Trace:
[ 1915.532838]  dump_stack+0x107/0x167
[ 1915.533226]  should_fail.cold+0x5/0xa
[ 1915.533662]  ? create_object.isra.0+0x3a/0xa20
[ 1915.534149]  should_failslab+0x5/0x20
[ 1915.534567]  kmem_cache_alloc+0x5b/0x310
[ 1915.535010]  create_object.isra.0+0x3a/0xa20
[ 1915.535496]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1915.536003]  kmem_cache_alloc_bulk+0x168/0x320
[ 1915.536492]  io_submit_sqes+0x6f76/0x85c0
[ 1915.536915]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1915.537430]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1915.537924]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1915.538423]  ? lock_downgrade+0x6d0/0x6d0
[ 1915.538835]  ? find_held_lock+0x2c/0x110
[ 1915.539263]  ? io_submit_sqes+0x85c0/0x85c0
[ 1915.539700]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1915.540210]  ? wait_for_completion_io+0x270/0x270
[ 1915.540691]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1915.541177]  ? vfs_write+0x354/0xa70
[ 1915.541568]  ? fput_many+0x2f/0x1a0
[ 1915.541954]  ? ksys_write+0x1a9/0x260
[ 1915.542359]  ? __ia32_sys_read+0xb0/0xb0
[ 1915.542795]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1915.543340]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1915.543883]  do_syscall_64+0x33/0x40
[ 1915.544272]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1915.544836] RIP: 0033:0x7f74447cdb19
[ 1915.545228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1915.547185] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1915.547985] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 1915.548756] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1915.549529] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 1915.550285] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1915.551046] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
[ 1915.583844] FAULT_INJECTION: forcing a failure.
[ 1915.583844] name failslab, interval 1, probability 0, space 0, times 0
[ 1915.586542] CPU: 0 PID: 9926 Comm: syz-executor.5 Not tainted 5.10.197 #1
[ 1915.587924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1915.589626] Call Trace:
[ 1915.590158]  dump_stack+0x107/0x167
[ 1915.590897]  should_fail.cold+0x5/0xa
[ 1915.591657]  ? create_object.isra.0+0x3a/0xa20
[ 1915.592572]  should_failslab+0x5/0x20
[ 1915.593336]  kmem_cache_alloc+0x5b/0x310
[ 1915.594156]  create_object.isra.0+0x3a/0xa20
[ 1915.595034]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1915.596047]  kmem_cache_alloc_bulk+0x168/0x320
[ 1915.596961]  io_submit_sqes+0x6f76/0x85c0
[ 1915.597802]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1915.598792]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1915.599790]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1915.600758]  ? lock_downgrade+0x6d0/0x6d0
[ 1915.601600]  ? find_held_lock+0x2c/0x110
[ 1915.602419]  ? io_submit_sqes+0x85c0/0x85c0
[ 1915.603290]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1915.604255]  ? wait_for_completion_io+0x270/0x270
[ 1915.605218]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1915.606150]  ? vfs_write+0x354/0xa70
[ 1915.606900]  ? fput_many+0x2f/0x1a0
[ 1915.607627]  ? ksys_write+0x1a9/0x260
[ 1915.608389]  ? __ia32_sys_read+0xb0/0xb0
[ 1915.609212]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1915.610271]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1915.611306]  do_syscall_64+0x33/0x40
[ 1915.612057]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1915.613085] RIP: 0033:0x7fbd70499b19
[ 1915.613837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1915.617523] RSP: 002b:00007fbd6da0f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1915.619040] RAX: ffffffffffffffda RBX: 00007fbd705acf60 RCX: 00007fbd70499b19
[ 1915.620466] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1915.621900] RBP: 00007fbd6da0f1d0 R08: 0000000020000340 R09: 0000000000000008
[ 1915.623320] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1915.624756] R13: 00007ffcfc8cf88f R14: 00007fbd6da0f300 R15: 0000000000022000
11:18:08 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:08 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:08 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:08 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:18:08 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

[ 1915.813366] FAULT_INJECTION: forcing a failure.
[ 1915.813366] name failslab, interval 1, probability 0, space 0, times 0
[ 1915.814605] CPU: 1 PID: 9944 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1915.815290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1915.816124] Call Trace:
[ 1915.816416]  dump_stack+0x107/0x167
[ 1915.816795]  should_fail.cold+0x5/0xa
[ 1915.817174]  ? create_object.isra.0+0x3a/0xa20
[ 1915.817649]  should_failslab+0x5/0x20
[ 1915.818032]  kmem_cache_alloc+0x5b/0x310
[ 1915.818454]  ? mark_held_locks+0x9e/0xe0
[ 1915.818862]  create_object.isra.0+0x3a/0xa20
[ 1915.819299]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1915.819805]  kmem_cache_alloc_bulk+0x168/0x320
[ 1915.820279]  io_submit_sqes+0x6f76/0x85c0
[ 1915.820702]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1915.821203]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1915.821719]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1915.822199]  ? lock_downgrade+0x6d0/0x6d0
[ 1915.822628]  ? find_held_lock+0x2c/0x110
[ 1915.823037]  ? io_submit_sqes+0x85c0/0x85c0
[ 1915.823473]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1915.823963]  ? wait_for_completion_io+0x270/0x270
[ 1915.824456]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1915.824944]  ? vfs_write+0x354/0xa70
[ 1915.825338]  ? fput_many+0x2f/0x1a0
[ 1915.825720]  ? ksys_write+0x1a9/0x260
[ 1915.826125]  ? __ia32_sys_read+0xb0/0xb0
[ 1915.826575]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1915.827119]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1915.827688]  do_syscall_64+0x33/0x40
[ 1915.828070]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1915.828609] RIP: 0033:0x7f981e647b19
[ 1915.828980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1915.830937] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1915.831751] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1915.832475] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1915.833232] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1915.833992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1915.834735] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:18:08 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:08 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:08 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:08 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

[ 1916.076642] FAULT_INJECTION: forcing a failure.
[ 1916.076642] name failslab, interval 1, probability 0, space 0, times 0
[ 1916.077898] CPU: 1 PID: 9955 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1916.078590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1916.079436] Call Trace:
[ 1916.079732]  dump_stack+0x107/0x167
[ 1916.080116]  should_fail.cold+0x5/0xa
[ 1916.080534]  ? create_object.isra.0+0x3a/0xa20
[ 1916.081009]  should_failslab+0x5/0x20
[ 1916.081421]  kmem_cache_alloc+0x5b/0x310
[ 1916.081855]  ? mark_held_locks+0x9e/0xe0
[ 1916.082284]  create_object.isra.0+0x3a/0xa20
[ 1916.082739]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1916.083246]  kmem_cache_alloc_bulk+0x168/0x320
[ 1916.083720]  io_submit_sqes+0x6f76/0x85c0
[ 1916.084143]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1916.084649]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1916.085154]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1916.085661]  ? io_submit_sqes+0x85c0/0x85c0
[ 1916.086108]  ? recalibrate_cpu_khz+0x10/0x10
[ 1916.086558]  ? ktime_get+0x158/0x1f0
[ 1916.086934]  ? setup_APIC_eilvt+0x2f0/0x2f0
[ 1916.087380]  ? clockevents_program_event+0x131/0x360
[ 1916.087891]  ? tick_program_event+0xa8/0x140
[ 1916.088332]  ? hrtimer_interrupt+0x771/0x9b0
[ 1916.088790]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1916.089330]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1916.089859]  do_syscall_64+0x33/0x40
[ 1916.090246]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1916.090768] RIP: 0033:0x7f981e647b19
[ 1916.091150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1916.093009] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1916.093797] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1916.094519] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1916.095249] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1916.095970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1916.096710] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:18:21 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:21 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:18:21 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:18:21 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:21 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 3)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:18:21 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 3)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:21 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 3)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:18:21 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

[ 1928.392228] FAULT_INJECTION: forcing a failure.
[ 1928.392228] name failslab, interval 1, probability 0, space 0, times 0
[ 1928.392537] FAULT_INJECTION: forcing a failure.
[ 1928.392537] name failslab, interval 1, probability 0, space 0, times 0
[ 1928.394810] CPU: 0 PID: 9970 Comm: syz-executor.0 Not tainted 5.10.197 #1
[ 1928.397172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1928.398872] Call Trace:
[ 1928.399424]  dump_stack+0x107/0x167
[ 1928.400161]  should_fail.cold+0x5/0xa
[ 1928.400934]  ? create_object.isra.0+0x3a/0xa20
[ 1928.401866]  should_failslab+0x5/0x20
[ 1928.402635]  kmem_cache_alloc+0x5b/0x310
[ 1928.403457]  ? mark_held_locks+0x9e/0xe0
[ 1928.404273]  create_object.isra.0+0x3a/0xa20
[ 1928.405155]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1928.406187]  kmem_cache_alloc_bulk+0x168/0x320
[ 1928.407115]  io_submit_sqes+0x6f76/0x85c0
[ 1928.407953]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1928.408945]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1928.410007]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1928.410978]  ? lock_downgrade+0x6d0/0x6d0
[ 1928.411811]  ? find_held_lock+0x2c/0x110
[ 1928.412637]  ? io_submit_sqes+0x85c0/0x85c0
[ 1928.413532]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1928.414504]  ? wait_for_completion_io+0x270/0x270
[ 1928.415474]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1928.416420]  ? vfs_write+0x354/0xa70
[ 1928.417174]  ? fput_many+0x2f/0x1a0
[ 1928.417932]  ? ksys_write+0x1a9/0x260
[ 1928.418702]  ? __ia32_sys_read+0xb0/0xb0
[ 1928.419519]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1928.420583]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1928.421640]  do_syscall_64+0x33/0x40
[ 1928.422391]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1928.423418] RIP: 0033:0x7f29628e2b19
[ 1928.424164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1928.427873] RSP: 002b:00007f295fe58188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1928.429396] RAX: ffffffffffffffda RBX: 00007f29629f5f60 RCX: 00007f29628e2b19
[ 1928.430837] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1928.432265] RBP: 00007f295fe581d0 R08: 0000000020000340 R09: 0000000000000008
[ 1928.433720] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1928.435149] R13: 00007fff54c1faaf R14: 00007f295fe58300 R15: 0000000000022000
[ 1928.436610] CPU: 1 PID: 9975 Comm: syz-executor.5 Not tainted 5.10.197 #1
[ 1928.437394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1928.438290] Call Trace:
[ 1928.438575]  dump_stack+0x107/0x167
[ 1928.438978]  should_fail.cold+0x5/0xa
[ 1928.439410]  ? create_object.isra.0+0x3a/0xa20
[ 1928.439909]  should_failslab+0x5/0x20
[ 1928.440322]  kmem_cache_alloc+0x5b/0x310
[ 1928.440751]  create_object.isra.0+0x3a/0xa20
[ 1928.441246]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1928.441817]  kmem_cache_alloc_bulk+0x168/0x320
[ 1928.442324]  io_submit_sqes+0x6f76/0x85c0
[ 1928.442783]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1928.443271]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1928.443807]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1928.444342]  ? lock_downgrade+0x6d0/0x6d0
[ 1928.444805]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1928.445404]  ? io_submit_sqes+0x85c0/0x85c0
[ 1928.445905]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1928.446445]  ? vfs_write+0x597/0xa70
[ 1928.446856]  ? wait_for_completion_io+0x270/0x270
[ 1928.447384]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1928.447911]  ? vfs_write+0x354/0xa70
[ 1928.448336]  ? fput_many+0x2f/0x1a0
[ 1928.448751]  ? ksys_write+0x1a9/0x260
[ 1928.449138]  ? __ia32_sys_read+0xb0/0xb0
[ 1928.449616]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1928.450132]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1928.450725]  do_syscall_64+0x33/0x40
[ 1928.451147]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1928.451735] RIP: 0033:0x7fbd70499b19
[ 1928.451991] FAULT_INJECTION: forcing a failure.
[ 1928.451991] name failslab, interval 1, probability 0, space 0, times 0
[ 1928.452154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1928.452170] RSP: 002b:00007fbd6da0f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1928.457037] RAX: ffffffffffffffda RBX: 00007fbd705acf60 RCX: 00007fbd70499b19
[ 1928.457834] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1928.458621] RBP: 00007fbd6da0f1d0 R08: 0000000020000340 R09: 0000000000000008
[ 1928.459407] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1928.460202] R13: 00007ffcfc8cf88f R14: 00007fbd6da0f300 R15: 0000000000022000
[ 1928.461020] CPU: 0 PID: 9977 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 1928.462439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1928.464134] Call Trace:
[ 1928.464682]  dump_stack+0x107/0x167
[ 1928.465431]  should_fail.cold+0x5/0xa
[ 1928.466226]  ? create_object.isra.0+0x3a/0xa20
[ 1928.467162]  should_failslab+0x5/0x20
[ 1928.467937]  kmem_cache_alloc+0x5b/0x310
[ 1928.468779]  ? mark_held_locks+0x9e/0xe0
[ 1928.469628]  create_object.isra.0+0x3a/0xa20
[ 1928.470515]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1928.471546]  kmem_cache_alloc_bulk+0x168/0x320
[ 1928.472476]  io_submit_sqes+0x6f76/0x85c0
[ 1928.473339]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1928.474361]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1928.475371]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1928.476347]  ? lock_downgrade+0x6d0/0x6d0
[ 1928.477183]  ? find_held_lock+0x2c/0x110
[ 1928.478023]  ? io_submit_sqes+0x85c0/0x85c0
[ 1928.478914]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1928.479902]  ? wait_for_completion_io+0x270/0x270
[ 1928.480884]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1928.481841]  ? vfs_write+0x354/0xa70
[ 1928.482605]  ? fput_many+0x2f/0x1a0
[ 1928.483351]  ? ksys_write+0x1a9/0x260
[ 1928.484118]  ? __ia32_sys_read+0xb0/0xb0
[ 1928.484950]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1928.486025]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1928.487065]  do_syscall_64+0x33/0x40
[ 1928.487820]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1928.488847] RIP: 0033:0x7f74447cdb19
[ 1928.489610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1928.493288] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1928.494833] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 1928.496271] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1928.497712] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 1928.499143] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1928.500578] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
11:18:21 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:21 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

[ 1928.512880] FAULT_INJECTION: forcing a failure.
[ 1928.512880] name failslab, interval 1, probability 0, space 0, times 0
[ 1928.515555] CPU: 0 PID: 9976 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1928.516943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1928.518627] Call Trace:
[ 1928.519165]  dump_stack+0x107/0x167
[ 1928.519915]  should_fail.cold+0x5/0xa
[ 1928.520688]  ? create_object.isra.0+0x3a/0xa20
[ 1928.521639]  should_failslab+0x5/0x20
[ 1928.522417]  kmem_cache_alloc+0x5b/0x310
[ 1928.523243]  ? mark_held_locks+0x9e/0xe0
[ 1928.524073]  create_object.isra.0+0x3a/0xa20
[ 1928.524969]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1928.526004]  kmem_cache_alloc_bulk+0x168/0x320
[ 1928.526934]  io_submit_sqes+0x6f76/0x85c0
[ 1928.527776]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1928.528776]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1928.529789]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1928.530768]  ? lock_downgrade+0x6d0/0x6d0
[ 1928.531601]  ? find_held_lock+0x2c/0x110
[ 1928.532427]  ? io_submit_sqes+0x85c0/0x85c0
[ 1928.533302]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1928.534298]  ? wait_for_completion_io+0x270/0x270
[ 1928.535278]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1928.536215]  ? vfs_write+0x354/0xa70
[ 1928.536970]  ? fput_many+0x2f/0x1a0
[ 1928.537720]  ? ksys_write+0x1a9/0x260
[ 1928.538495]  ? __ia32_sys_read+0xb0/0xb0
[ 1928.539326]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1928.540378]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1928.541432]  do_syscall_64+0x33/0x40
[ 1928.542192]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1928.543231] RIP: 0033:0x7f981e647b19
[ 1928.543980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1928.547709] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1928.549238] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1928.550693] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1928.552126] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1928.553577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1928.555014] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:18:21 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:21 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:21 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:21 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:18:21 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:21 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

[ 1928.804788] FAULT_INJECTION: forcing a failure.
[ 1928.804788] name failslab, interval 1, probability 0, space 0, times 0
[ 1928.807630] CPU: 0 PID: 9998 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1928.809010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1928.810686] Call Trace:
[ 1928.811226]  dump_stack+0x107/0x167
[ 1928.811967]  should_fail.cold+0x5/0xa
[ 1928.812736]  ? create_object.isra.0+0x3a/0xa20
[ 1928.813683]  should_failslab+0x5/0x20
[ 1928.814447]  kmem_cache_alloc+0x5b/0x310
[ 1928.815262]  ? mark_held_locks+0x9e/0xe0
[ 1928.816082]  create_object.isra.0+0x3a/0xa20
[ 1928.816962]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1928.818061]  kmem_cache_alloc_bulk+0x168/0x320
[ 1928.819001]  io_submit_sqes+0x6f76/0x85c0
[ 1928.819839]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1928.820840]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1928.821884]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1928.822866]  ? lock_downgrade+0x6d0/0x6d0
[ 1928.823706]  ? find_held_lock+0x2c/0x110
[ 1928.824532]  ? io_submit_sqes+0x85c0/0x85c0
[ 1928.825419]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1928.826420]  ? wait_for_completion_io+0x270/0x270
[ 1928.827400]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1928.828338]  ? vfs_write+0x354/0xa70
[ 1928.829102]  ? fput_many+0x2f/0x1a0
[ 1928.829851]  ? ksys_write+0x1a9/0x260
[ 1928.830624]  ? __ia32_sys_read+0xb0/0xb0
[ 1928.831448]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1928.832496]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1928.833554]  do_syscall_64+0x33/0x40
[ 1928.834303]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1928.835332] RIP: 0033:0x7f981e647b19
[ 1928.836079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1928.839775] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1928.841298] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1928.842727] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1928.844149] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1928.845590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1928.847015] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:18:42 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:42 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:42 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:18:42 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 4)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:42 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:18:42 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 4)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:18:42 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 4)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:18:42 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

[ 1949.211859] FAULT_INJECTION: forcing a failure.
[ 1949.211859] name failslab, interval 1, probability 0, space 0, times 0
[ 1949.213176] CPU: 0 PID: 10008 Comm: syz-executor.5 Not tainted 5.10.197 #1
[ 1949.213939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1949.214829] Call Trace:
[ 1949.215121]  dump_stack+0x107/0x167
[ 1949.215517]  should_fail.cold+0x5/0xa
[ 1949.215924]  ? create_object.isra.0+0x3a/0xa20
[ 1949.216418]  should_failslab+0x5/0x20
[ 1949.216836]  kmem_cache_alloc+0x5b/0x310
[ 1949.217296]  ? mark_held_locks+0x9e/0xe0
[ 1949.217788]  create_object.isra.0+0x3a/0xa20
[ 1949.218269]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1949.218811]  kmem_cache_alloc_bulk+0x168/0x320
[ 1949.219323]  io_submit_sqes+0x6f76/0x85c0
[ 1949.219769]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1949.220309]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.220835]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.221371]  ? lock_downgrade+0x6d0/0x6d0
[ 1949.221829]  ? find_held_lock+0x2c/0x110
[ 1949.222274]  ? io_submit_sqes+0x85c0/0x85c0
[ 1949.222745]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1949.223285]  ? wait_for_completion_io+0x270/0x270
[ 1949.223804]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1949.224302]  ? vfs_write+0x354/0xa70
[ 1949.224702]  ? fput_many+0x2f/0x1a0
[ 1949.225098]  ? ksys_write+0x1a9/0x260
[ 1949.225506]  ? __ia32_sys_read+0xb0/0xb0
[ 1949.225976]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1949.226537]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1949.227096]  do_syscall_64+0x33/0x40
[ 1949.227494]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1949.228035] RIP: 0033:0x7fbd70499b19
[ 1949.228445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1949.230416] RSP: 002b:00007fbd6da0f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1949.231226] RAX: ffffffffffffffda RBX: 00007fbd705acf60 RCX: 00007fbd70499b19
[ 1949.231986] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1949.232740] RBP: 00007fbd6da0f1d0 R08: 0000000020000340 R09: 0000000000000008
[ 1949.233519] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1949.234278] R13: 00007ffcfc8cf88f R14: 00007fbd6da0f300 R15: 0000000000022000
[ 1949.255879] FAULT_INJECTION: forcing a failure.
[ 1949.255879] name failslab, interval 1, probability 0, space 0, times 0
[ 1949.258643] CPU: 1 PID: 10016 Comm: syz-executor.0 Not tainted 5.10.197 #1
[ 1949.260144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1949.261954] Call Trace:
[ 1949.262525]  dump_stack+0x107/0x167
[ 1949.263320]  should_fail.cold+0x5/0xa
[ 1949.264146]  ? create_object.isra.0+0x3a/0xa20
[ 1949.265141]  should_failslab+0x5/0x20
[ 1949.265968]  kmem_cache_alloc+0x5b/0x310
[ 1949.266850]  ? mark_held_locks+0x9e/0xe0
[ 1949.267732]  create_object.isra.0+0x3a/0xa20
[ 1949.268682]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1949.269793]  kmem_cache_alloc_bulk+0x168/0x320
[ 1949.270787]  io_submit_sqes+0x6f76/0x85c0
[ 1949.271691]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1949.272762]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.273866]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.274911]  ? lock_downgrade+0x6d0/0x6d0
[ 1949.275804]  ? find_held_lock+0x2c/0x110
[ 1949.276692]  ? io_submit_sqes+0x85c0/0x85c0
[ 1949.277634]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1949.278687]  ? wait_for_completion_io+0x270/0x270
[ 1949.279743]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1949.280745]  ? vfs_write+0x354/0xa70
[ 1949.281559]  ? fput_many+0x2f/0x1a0
[ 1949.282409]  ? ksys_write+0x1a9/0x260
[ 1949.283226]  ? __ia32_sys_read+0xb0/0xb0
[ 1949.284100]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1949.285221]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1949.286338]  do_syscall_64+0x33/0x40
[ 1949.287143]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1949.288239] RIP: 0033:0x7f29628e2b19
[ 1949.289036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1949.292980] RSP: 002b:00007f295fe58188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1949.294967] RAX: ffffffffffffffda RBX: 00007f29629f5f60 RCX: 00007f29628e2b19
[ 1949.296662] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1949.298492] RBP: 00007f295fe581d0 R08: 0000000020000340 R09: 0000000000000008
[ 1949.300203] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1949.301940] R13: 00007fff54c1faaf R14: 00007f295fe58300 R15: 0000000000022000
[ 1949.306706] FAULT_INJECTION: forcing a failure.
[ 1949.306706] name failslab, interval 1, probability 0, space 0, times 0
[ 1949.309451] CPU: 1 PID: 10010 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 1949.310883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1949.312583] Call Trace:
[ 1949.313135]  dump_stack+0x107/0x167
[ 1949.313911]  should_fail.cold+0x5/0xa
[ 1949.314700]  ? create_object.isra.0+0x3a/0xa20
[ 1949.315649]  should_failslab+0x5/0x20
[ 1949.316423]  kmem_cache_alloc+0x5b/0x310
[ 1949.317243]  ? mark_held_locks+0x9e/0xe0
[ 1949.318080]  create_object.isra.0+0x3a/0xa20
[ 1949.318993]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1949.320034]  kmem_cache_alloc_bulk+0x168/0x320
[ 1949.320973]  io_submit_sqes+0x6f76/0x85c0
[ 1949.321834]  ? __mutex_lock+0x4fe/0x10b0
[ 1949.322682]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.323697]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.324668]  ? lock_downgrade+0x6d0/0x6d0
[ 1949.325519]  ? find_held_lock+0x2c/0x110
[ 1949.326349]  ? io_submit_sqes+0x85c0/0x85c0
[ 1949.327215]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1949.328176]  ? wait_for_completion_io+0x270/0x270
[ 1949.329139]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1949.330078]  ? vfs_write+0x354/0xa70
[ 1949.330823]  ? fput_many+0x2f/0x1a0
[ 1949.331551]  ? ksys_write+0x1a9/0x260
[ 1949.332320]  ? __ia32_sys_read+0xb0/0xb0
[ 1949.333146]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1949.334215]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1949.335260]  do_syscall_64+0x33/0x40
[ 1949.336028]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1949.337077] RIP: 0033:0x7f74447cdb19
[ 1949.337849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1949.341571] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1949.343130] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 1949.344574] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1949.346028] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 1949.347444] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1949.348897] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
[ 1949.362599] FAULT_INJECTION: forcing a failure.
[ 1949.362599] name failslab, interval 1, probability 0, space 0, times 0
[ 1949.365188] CPU: 1 PID: 10006 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1949.366572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1949.368257] Call Trace:
[ 1949.368796]  dump_stack+0x107/0x167
[ 1949.369553]  should_fail.cold+0x5/0xa
[ 1949.370341]  ? create_object.isra.0+0x3a/0xa20
[ 1949.371259]  should_failslab+0x5/0x20
[ 1949.372025]  kmem_cache_alloc+0x5b/0x310
[ 1949.372844]  ? mark_held_locks+0x9e/0xe0
[ 1949.373665]  create_object.isra.0+0x3a/0xa20
[ 1949.374568]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1949.375621]  kmem_cache_alloc_bulk+0x168/0x320
[ 1949.376558]  io_submit_sqes+0x6f76/0x85c0
[ 1949.377422]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1949.378434]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.379444]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.380436]  ? lock_downgrade+0x6d0/0x6d0
[ 1949.381252]  ? find_held_lock+0x2c/0x110
[ 1949.382099]  ? io_submit_sqes+0x85c0/0x85c0
[ 1949.382995]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1949.383919]  ? wait_for_completion_io+0x270/0x270
[ 1949.384893]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1949.385819]  ? vfs_write+0x354/0xa70
[ 1949.386570]  ? fput_many+0x2f/0x1a0
[ 1949.387286]  ? ksys_write+0x1a9/0x260
[ 1949.388000]  ? __ia32_sys_read+0xb0/0xb0
[ 1949.388805]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1949.389851]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1949.390885]  do_syscall_64+0x33/0x40
[ 1949.391633]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1949.392653] RIP: 0033:0x7f981e647b19
[ 1949.393411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1949.397113] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1949.398658] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1949.400080] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1949.401517] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1949.402962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1949.404387] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:18:42 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:42 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 5)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:18:42 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

[ 1949.452183] FAULT_INJECTION: forcing a failure.
[ 1949.452183] name failslab, interval 1, probability 0, space 0, times 0
[ 1949.455034] CPU: 1 PID: 10027 Comm: syz-executor.5 Not tainted 5.10.197 #1
[ 1949.456443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1949.458143] Call Trace:
[ 1949.458688]  dump_stack+0x107/0x167
[ 1949.459440]  should_fail.cold+0x5/0xa
[ 1949.460223]  ? create_object.isra.0+0x3a/0xa20
[ 1949.461168]  should_failslab+0x5/0x20
[ 1949.461951]  kmem_cache_alloc+0x5b/0x310
[ 1949.462776]  ? mark_held_locks+0x9e/0xe0
[ 1949.463602]  create_object.isra.0+0x3a/0xa20
[ 1949.464498]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1949.465536]  kmem_cache_alloc_bulk+0x168/0x320
[ 1949.466506]  io_submit_sqes+0x6f76/0x85c0
[ 1949.467350]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1949.468359]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.469358]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.470370]  ? lock_downgrade+0x6d0/0x6d0
[ 1949.471250]  ? find_held_lock+0x2c/0x110
[ 1949.472076]  ? io_submit_sqes+0x85c0/0x85c0
[ 1949.472973]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1949.473958]  ? wait_for_completion_io+0x270/0x270
[ 1949.474936]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1949.475864]  ? vfs_write+0x354/0xa70
[ 1949.476618]  ? fput_many+0x2f/0x1a0
[ 1949.477347]  ? ksys_write+0x1a9/0x260
[ 1949.478126]  ? __ia32_sys_read+0xb0/0xb0
[ 1949.478951]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1949.480002]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1949.481037]  do_syscall_64+0x33/0x40
[ 1949.481795]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1949.482819] RIP: 0033:0x7fbd70499b19
[ 1949.483590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1949.487297] RSP: 002b:00007fbd6da0f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1949.488823] RAX: ffffffffffffffda RBX: 00007fbd705acf60 RCX: 00007fbd70499b19
[ 1949.490271] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1949.491703] RBP: 00007fbd6da0f1d0 R08: 0000000020000340 R09: 0000000000000008
[ 1949.493136] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1949.494587] R13: 00007ffcfc8cf88f R14: 00007fbd6da0f300 R15: 0000000000022000
11:18:42 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:42 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:42 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

[ 1949.671631] FAULT_INJECTION: forcing a failure.
[ 1949.671631] name failslab, interval 1, probability 0, space 0, times 0
[ 1949.674555] CPU: 1 PID: 10039 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1949.675985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1949.677641] Call Trace:
[ 1949.678191]  dump_stack+0x107/0x167
[ 1949.678931]  should_fail.cold+0x5/0xa
[ 1949.679698]  ? create_object.isra.0+0x3a/0xa20
[ 1949.680615]  should_failslab+0x5/0x20
[ 1949.681387]  kmem_cache_alloc+0x5b/0x310
[ 1949.682219]  ? mark_held_locks+0x9e/0xe0
[ 1949.683029]  create_object.isra.0+0x3a/0xa20
[ 1949.683925]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1949.684974]  kmem_cache_alloc_bulk+0x168/0x320
[ 1949.685907]  io_submit_sqes+0x6f76/0x85c0
[ 1949.686747]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1949.687737]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.688752]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1949.689762]  ? io_submit_sqes+0x85c0/0x85c0
[ 1949.690629]  ? recalibrate_cpu_khz+0x10/0x10
[ 1949.691506]  ? ktime_get+0x158/0x1f0
[ 1949.692261]  ? setup_APIC_eilvt+0x2f0/0x2f0
[ 1949.693126]  ? clockevents_program_event+0x131/0x360
[ 1949.694157]  ? tick_program_event+0xa8/0x140
[ 1949.695048]  ? hrtimer_interrupt+0x771/0x9b0
[ 1949.695945]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1949.696988]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1949.698088]  do_syscall_64+0x33/0x40
[ 1949.698852]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1949.699905] RIP: 0033:0x7f981e647b19
[ 1949.700674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1949.704433] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1949.705984] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1949.707426] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1949.708875] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1949.710342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1949.711798] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:18:54 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:18:54 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 6)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:18:54 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:54 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:54 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 5)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:54 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:18:54 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 5)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:18:54 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

[ 1962.082086] FAULT_INJECTION: forcing a failure.
[ 1962.082086] name failslab, interval 1, probability 0, space 0, times 0
[ 1962.084682] CPU: 1 PID: 10047 Comm: syz-executor.5 Not tainted 5.10.197 #1
[ 1962.086140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1962.087853] Call Trace:
[ 1962.088397]  dump_stack+0x107/0x167
[ 1962.089158]  should_fail.cold+0x5/0xa
[ 1962.089795] FAULT_INJECTION: forcing a failure.
[ 1962.089795] name failslab, interval 1, probability 0, space 0, times 0
[ 1962.089962]  ? create_object.isra.0+0x3a/0xa20
[ 1962.089992]  should_failslab+0x5/0x20
[ 1962.094025]  kmem_cache_alloc+0x5b/0x310
[ 1962.094885]  ? mark_held_locks+0x9e/0xe0
[ 1962.095727]  create_object.isra.0+0x3a/0xa20
[ 1962.096640]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1962.097695]  kmem_cache_alloc_bulk+0x168/0x320
[ 1962.098666]  io_submit_sqes+0x6f76/0x85c0
[ 1962.099530]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1962.100564]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1962.101586]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1962.102614]  ? lock_downgrade+0x6d0/0x6d0
[ 1962.103476]  ? find_held_lock+0x2c/0x110
[ 1962.104331]  ? io_submit_sqes+0x85c0/0x85c0
[ 1962.105230]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1962.106246]  ? wait_for_completion_io+0x270/0x270
[ 1962.107247]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1962.108204]  ? vfs_write+0x354/0xa70
[ 1962.108991]  ? fput_many+0x2f/0x1a0
[ 1962.109742]  ? ksys_write+0x1a9/0x260
[ 1962.110569]  ? __ia32_sys_read+0xb0/0xb0
[ 1962.111399]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1962.112505]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1962.113566]  do_syscall_64+0x33/0x40
[ 1962.114366]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1962.115410] RIP: 0033:0x7fbd70499b19
[ 1962.116191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1962.120013] RSP: 002b:00007fbd6da0f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1962.121575] RAX: ffffffffffffffda RBX: 00007fbd705acf60 RCX: 00007fbd70499b19
[ 1962.123076] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1962.124561] RBP: 00007fbd6da0f1d0 R08: 0000000020000340 R09: 0000000000000008
[ 1962.126043] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1962.127528] R13: 00007ffcfc8cf88f R14: 00007fbd6da0f300 R15: 0000000000022000
[ 1962.129011] CPU: 0 PID: 10056 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 1962.130475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1962.132167] Call Trace:
[ 1962.132722]  dump_stack+0x107/0x167
[ 1962.133467]  should_fail.cold+0x5/0xa
[ 1962.134263]  ? create_object.isra.0+0x3a/0xa20
[ 1962.135223]  should_failslab+0x5/0x20
[ 1962.136032]  kmem_cache_alloc+0x5b/0x310
[ 1962.136661] FAULT_INJECTION: forcing a failure.
[ 1962.136661] name failslab, interval 1, probability 0, space 0, times 0
[ 1962.136867]  ? mark_held_locks+0x9e/0xe0
[ 1962.136890]  create_object.isra.0+0x3a/0xa20
[ 1962.140793]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1962.141825]  kmem_cache_alloc_bulk+0x168/0x320
[ 1962.142774]  io_submit_sqes+0x6f76/0x85c0
[ 1962.143651]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1962.144668]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1962.145693]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1962.146683]  ? lock_downgrade+0x6d0/0x6d0
[ 1962.147516]  ? find_held_lock+0x2c/0x110
[ 1962.148350]  ? io_submit_sqes+0x85c0/0x85c0
[ 1962.149242]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1962.150242]  ? wait_for_completion_io+0x270/0x270
[ 1962.151232]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1962.152185]  ? vfs_write+0x354/0xa70
[ 1962.152948]  ? fput_many+0x2f/0x1a0
[ 1962.153695]  ? ksys_write+0x1a9/0x260
[ 1962.154498]  ? __ia32_sys_read+0xb0/0xb0
[ 1962.155340]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1962.156422]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1962.157494]  do_syscall_64+0x33/0x40
[ 1962.158263]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1962.159307] RIP: 0033:0x7f74447cdb19
[ 1962.160081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1962.163837] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1962.165402] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 1962.166870] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1962.168341] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 1962.169792] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1962.171276] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
[ 1962.172779] CPU: 1 PID: 10058 Comm: syz-executor.0 Not tainted 5.10.197 #1
[ 1962.174252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1962.175929] Call Trace:
[ 1962.176469]  dump_stack+0x107/0x167
[ 1962.177217]  should_fail.cold+0x5/0xa
[ 1962.178021]  ? create_object.isra.0+0x3a/0xa20
[ 1962.178958]  should_failslab+0x5/0x20
[ 1962.179725]  kmem_cache_alloc+0x5b/0x310
[ 1962.180548]  ? mark_held_locks+0x9e/0xe0
[ 1962.181393]  create_object.isra.0+0x3a/0xa20
[ 1962.182344]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1962.183416]  kmem_cache_alloc_bulk+0x168/0x320
[ 1962.184358]  io_submit_sqes+0x6f76/0x85c0
[ 1962.184614] FAULT_INJECTION: forcing a failure.
[ 1962.184614] name failslab, interval 1, probability 0, space 0, times 0
[ 1962.185212]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1962.188475]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1962.189502]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1962.190520]  ? lock_downgrade+0x6d0/0x6d0
[ 1962.191375]  ? find_held_lock+0x2c/0x110
[ 1962.192231]  ? io_submit_sqes+0x85c0/0x85c0
[ 1962.193116]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1962.194120]  ? wait_for_completion_io+0x270/0x270
[ 1962.195096]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1962.196037]  ? vfs_write+0x354/0xa70
[ 1962.196800]  ? fput_many+0x2f/0x1a0
[ 1962.197539]  ? ksys_write+0x1a9/0x260
[ 1962.198344]  ? __ia32_sys_read+0xb0/0xb0
[ 1962.199169]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1962.200224]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1962.201270]  do_syscall_64+0x33/0x40
[ 1962.202047]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1962.203082] RIP: 0033:0x7f29628e2b19
[ 1962.203837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1962.207563] RSP: 002b:00007f295fe58188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1962.209132] RAX: ffffffffffffffda RBX: 00007f29629f5f60 RCX: 00007f29628e2b19
[ 1962.210609] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1962.212041] RBP: 00007f295fe581d0 R08: 0000000020000340 R09: 0000000000000008
[ 1962.213516] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1962.215019] R13: 00007fff54c1faaf R14: 00007f295fe58300 R15: 0000000000022000
[ 1962.216481] CPU: 0 PID: 10063 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1962.217934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1962.219635] Call Trace:
[ 1962.220166]  dump_stack+0x107/0x167
[ 1962.220920]  should_fail.cold+0x5/0xa
[ 1962.221698]  ? create_object.isra.0+0x3a/0xa20
[ 1962.222639]  should_failslab+0x5/0x20
[ 1962.223422]  kmem_cache_alloc+0x5b/0x310
[ 1962.224257]  create_object.isra.0+0x3a/0xa20
[ 1962.225167]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1962.226210]  kmem_cache_alloc_trace+0x151/0x320
[ 1962.227168]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1962.228154]  __io_uring_add_tctx_node+0x15c/0x520
[ 1962.229150]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 1962.230248]  __do_sys_io_uring_enter+0x14de/0x1920
[ 1962.231247]  ? lock_downgrade+0x6d0/0x6d0
[ 1962.232099]  ? find_held_lock+0x2c/0x110
[ 1962.232929]  ? io_submit_sqes+0x85c0/0x85c0
[ 1962.233809]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1962.234799]  ? wait_for_completion_io+0x270/0x270
[ 1962.235779]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1962.236720]  ? vfs_write+0x354/0xa70
[ 1962.237488]  ? fput_many+0x2f/0x1a0
[ 1962.238245]  ? ksys_write+0x1a9/0x260
[ 1962.239017]  ? __ia32_sys_read+0xb0/0xb0
[ 1962.239849]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1962.240913]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1962.241975]  do_syscall_64+0x33/0x40
[ 1962.242731]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1962.243765] RIP: 0033:0x7f981e647b19
[ 1962.244519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1962.248204] RSP: 002b:00007f981bb9c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1962.249724] RAX: ffffffffffffffda RBX: 00007f981e75b020 RCX: 00007f981e647b19
[ 1962.251165] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1962.252603] RBP: 00007f981bb9c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1962.254059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1962.255497] R13: 00007ffe21ce487f R14: 00007f981bb9c300 R15: 0000000000022000
11:18:55 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:55 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:55 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:55 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:55 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:18:55 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:18:55 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:18:55 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

[ 1962.624857] FAULT_INJECTION: forcing a failure.
[ 1962.624857] name failslab, interval 1, probability 0, space 0, times 0
[ 1962.626931] CPU: 0 PID: 10083 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1962.628023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1962.629313] Call Trace:
[ 1962.629734]  dump_stack+0x107/0x167
[ 1962.630340]  should_fail.cold+0x5/0xa
[ 1962.630950]  ? __inet_hash_connect+0x674/0xd50
[ 1962.631676]  should_failslab+0x5/0x20
[ 1962.632271]  kmem_cache_alloc+0x5b/0x310
[ 1962.632927]  __inet_hash_connect+0x674/0xd50
[ 1962.633626]  ? __inet_lookup_established+0x690/0x690
[ 1962.634440]  ? inet_hash+0x80/0x80
[ 1962.635014]  tcp_v4_connect+0xe29/0x1eb0
[ 1962.635661]  ? tcp_v4_destroy_sock+0x6a0/0x6a0
[ 1962.636376]  ? __lock_acquire+0x1657/0x5b00
[ 1962.637054]  tcp_v6_connect+0x8d7/0x1c40
[ 1962.637698]  ? inet6_sk_rx_dst_set+0x2e0/0x2e0
[ 1962.638436]  ? mark_lock+0xf5/0x2df0
[ 1962.639033]  __inet_stream_connect+0x8d8/0xe70
[ 1962.639751]  ? lock_release+0x680/0x680
[ 1962.640373]  ? lock_downgrade+0x6d0/0x6d0
[ 1962.641031]  ? inet_init_net+0x590/0x590
[ 1962.641666]  ? mark_held_locks+0x9e/0xe0
[ 1962.642332]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1962.643143]  ? __local_bh_enable_ip+0x9d/0x100
[ 1962.643863]  inet_stream_connect+0x53/0xa0
[ 1962.644525]  ? __inet_stream_connect+0xe70/0xe70
[ 1962.645262]  __sys_connect_file+0x15b/0x1a0
[ 1962.645948]  io_connect+0x10d/0x610
[ 1962.646499]  ? io_prep_rw+0x1050/0x1050
[ 1962.647116]  ? __lock_acquire+0xbb1/0x5b00
[ 1962.647775]  io_issue_sqe+0x1611/0x7700
[ 1962.648372]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1962.649182]  ? lock_chain_count+0x20/0x20
[ 1962.649828]  ? __is_insn_slot_addr+0x14c/0x290
[ 1962.650561]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1962.651384]  ? io_connect+0x610/0x610
[ 1962.651963]  ? lock_acquire+0x197/0x470
[ 1962.652586]  ? find_held_lock+0x2c/0x110
[ 1962.653221]  ? __fget_files+0x26d/0x4c0
[ 1962.653849]  ? lock_downgrade+0x6d0/0x6d0
[ 1962.654510]  __io_queue_sqe+0x90/0x9d0
[ 1962.655120]  ? io_issue_sqe+0x7700/0x7700
[ 1962.655791]  io_submit_sqes+0x4461/0x85c0
[ 1962.656457]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1962.657236]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1962.658023]  ? lock_downgrade+0x6d0/0x6d0
[ 1962.658677]  ? find_held_lock+0x2c/0x110
[ 1962.659289]  ? io_submit_sqes+0x85c0/0x85c0
[ 1962.659962]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1962.660726]  ? wait_for_completion_io+0x270/0x270
[ 1962.661488]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1962.662215]  ? vfs_write+0x354/0xa70
[ 1962.662789]  ? fput_many+0x2f/0x1a0
[ 1962.663359]  ? ksys_write+0x1a9/0x260
[ 1962.663970]  ? __ia32_sys_read+0xb0/0xb0
[ 1962.664609]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1962.665426]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1962.666243]  do_syscall_64+0x33/0x40
[ 1962.666840]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1962.667648] RIP: 0033:0x7f981e647b19
[ 1962.668239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1962.671114] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1962.672304] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1962.673428] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1962.674567] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1962.675668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1962.676773] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:18:55 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:08 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:19:08 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:19:08 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:08 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:19:08 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:08 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:08 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:19:08 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 6)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

[ 1975.725947] FAULT_INJECTION: forcing a failure.
[ 1975.725947] name failslab, interval 1, probability 0, space 0, times 0
[ 1975.727238] CPU: 0 PID: 10107 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1975.727981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1975.728873] Call Trace:
[ 1975.729159]  dump_stack+0x107/0x167
[ 1975.729549]  should_fail.cold+0x5/0xa
[ 1975.729967]  ? create_object.isra.0+0x3a/0xa20
[ 1975.730474]  should_failslab+0x5/0x20
[ 1975.730883]  kmem_cache_alloc+0x5b/0x310
[ 1975.731333]  ? lock_release+0x680/0x680
[ 1975.731760]  create_object.isra.0+0x3a/0xa20
[ 1975.732233]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1975.732781]  kmem_cache_alloc+0x159/0x310
[ 1975.733233]  __inet_hash_connect+0x674/0xd50
[ 1975.733705]  ? __inet_lookup_established+0x690/0x690
[ 1975.734260]  ? inet_hash+0x80/0x80
[ 1975.734656]  tcp_v4_connect+0xe29/0x1eb0
[ 1975.735120]  ? tcp_v4_destroy_sock+0x6a0/0x6a0
[ 1975.735605]  ? __lock_acquire+0x1657/0x5b00
[ 1975.736086]  tcp_v6_connect+0x8d7/0x1c40
[ 1975.736528]  ? inet6_sk_rx_dst_set+0x2e0/0x2e0
[ 1975.736714] FAULT_INJECTION: forcing a failure.
[ 1975.736714] name failslab, interval 1, probability 0, space 0, times 0
[ 1975.737041]  ? mark_lock+0xf5/0x2df0
[ 1975.739740]  __inet_stream_connect+0x8d8/0xe70
[ 1975.740231]  ? lock_release+0x680/0x680
[ 1975.740663]  ? lock_downgrade+0x6d0/0x6d0
[ 1975.741102]  ? inet_init_net+0x590/0x590
[ 1975.741551]  ? mark_held_locks+0x9e/0xe0
[ 1975.742006]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1975.742573]  ? __local_bh_enable_ip+0x9d/0x100
[ 1975.743064]  inet_stream_connect+0x53/0xa0
[ 1975.743523]  ? __inet_stream_connect+0xe70/0xe70
[ 1975.744027]  __sys_connect_file+0x15b/0x1a0
[ 1975.744502]  io_connect+0x10d/0x610
[ 1975.744902]  ? io_prep_rw+0x1050/0x1050
[ 1975.745337]  ? __lock_acquire+0xbb1/0x5b00
[ 1975.745788]  io_issue_sqe+0x1611/0x7700
[ 1975.746218]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1975.746799]  ? lock_chain_count+0x20/0x20
[ 1975.747260]  ? __is_insn_slot_addr+0x14c/0x290
[ 1975.747769]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1975.748344]  ? io_connect+0x610/0x610
[ 1975.748768]  ? lock_acquire+0x197/0x470
[ 1975.749205]  ? find_held_lock+0x2c/0x110
[ 1975.749662]  ? __fget_files+0x26d/0x4c0
[ 1975.750117]  ? lock_downgrade+0x6d0/0x6d0
[ 1975.750592]  __io_queue_sqe+0x90/0x9d0
[ 1975.751023]  ? io_issue_sqe+0x7700/0x7700
[ 1975.751493]  io_submit_sqes+0x4461/0x85c0
[ 1975.751965]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1975.752519]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1975.753054]  ? lock_downgrade+0x6d0/0x6d0
[ 1975.753521]  ? find_held_lock+0x2c/0x110
[ 1975.753970]  ? io_submit_sqes+0x85c0/0x85c0
[ 1975.754467]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1975.755002]  ? wait_for_completion_io+0x270/0x270
[ 1975.755537]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1975.756047]  ? vfs_write+0x354/0xa70
[ 1975.756460]  ? fput_many+0x2f/0x1a0
[ 1975.756860]  ? ksys_write+0x1a9/0x260
[ 1975.757282]  ? __ia32_sys_read+0xb0/0xb0
[ 1975.757735]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1975.758327]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1975.758908]  do_syscall_64+0x33/0x40
[ 1975.759319]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1975.759887] RIP: 0033:0x7f981e647b19
[ 1975.760296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1975.762337] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1975.763178] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1975.763966] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1975.764752] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1975.765538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1975.766341] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
[ 1975.767160] CPU: 1 PID: 10109 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 1975.768605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1975.770297] Call Trace:
[ 1975.770851]  dump_stack+0x107/0x167
[ 1975.771594]  should_fail.cold+0x5/0xa
[ 1975.772376]  ? create_object.isra.0+0x3a/0xa20
[ 1975.773302]  should_failslab+0x5/0x20
[ 1975.774094]  kmem_cache_alloc+0x5b/0x310
[ 1975.774921]  ? mark_held_locks+0x9e/0xe0
[ 1975.775753]  create_object.isra.0+0x3a/0xa20
[ 1975.776656]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1975.777702]  kmem_cache_alloc_bulk+0x168/0x320
[ 1975.778655]  io_submit_sqes+0x6f76/0x85c0
[ 1975.779515]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1975.780513]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1975.781536]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1975.782531]  ? lock_downgrade+0x6d0/0x6d0
[ 1975.783370]  ? find_held_lock+0x2c/0x110
[ 1975.784203]  ? io_submit_sqes+0x85c0/0x85c0
[ 1975.785098]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1975.786096]  ? wait_for_completion_io+0x270/0x270
[ 1975.787082]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1975.788027]  ? vfs_write+0x354/0xa70
[ 1975.788803]  ? fput_many+0x2f/0x1a0
[ 1975.789547]  ? ksys_write+0x1a9/0x260
[ 1975.790335]  ? __ia32_sys_read+0xb0/0xb0
[ 1975.791174]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1975.792251]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1975.793321]  do_syscall_64+0x33/0x40
[ 1975.794109]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1975.795159] RIP: 0033:0x7f74447cdb19
[ 1975.795924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1975.799710] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1975.801293] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 1975.802789] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1975.804260] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 1975.805736] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1975.807215] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
11:19:08 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:08 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:08 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:08 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:08 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:19:08 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x8, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:19:09 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:09 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

[ 1976.169256] FAULT_INJECTION: forcing a failure.
[ 1976.169256] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1976.172283] CPU: 1 PID: 10129 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1976.173680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1976.175386] Call Trace:
[ 1976.175940]  dump_stack+0x107/0x167
[ 1976.176684]  should_fail.cold+0x5/0xa
[ 1976.177462]  _copy_from_user+0x2e/0x1b0
[ 1976.178293]  move_addr_to_kernel.part.0+0x31/0x110
[ 1976.179305]  move_addr_to_kernel+0x4f/0x70
[ 1976.180170]  io_connect+0x47a/0x610
[ 1976.180910]  ? io_prep_rw+0x1050/0x1050
[ 1976.181734]  ? __lock_acquire+0x1657/0x5b00
[ 1976.182638]  ? __lock_acquire+0xbb1/0x5b00
[ 1976.183506]  io_issue_sqe+0x1611/0x7700
[ 1976.184322]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1976.185400]  ? lock_chain_count+0x20/0x20
[ 1976.186261]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1976.187344]  ? io_connect+0x610/0x610
[ 1976.188123]  ? lock_acquire+0x197/0x470
[ 1976.188940]  ? find_held_lock+0x2c/0x110
[ 1976.189780]  ? __fget_files+0x26d/0x4c0
[ 1976.190596]  ? lock_downgrade+0x6d0/0x6d0
[ 1976.191447]  __io_queue_sqe+0x90/0x9d0
[ 1976.192253]  ? io_issue_sqe+0x7700/0x7700
[ 1976.193115]  io_submit_sqes+0x4461/0x85c0
[ 1976.193990]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1976.195047]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1976.196040]  ? lock_downgrade+0x6d0/0x6d0
[ 1976.196878]  ? find_held_lock+0x2c/0x110
[ 1976.197711]  ? io_submit_sqes+0x85c0/0x85c0
[ 1976.198615]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1976.199601]  ? wait_for_completion_io+0x270/0x270
[ 1976.200581]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1976.201534]  ? vfs_write+0x354/0xa70
[ 1976.202310]  ? fput_many+0x2f/0x1a0
[ 1976.203057]  ? ksys_write+0x1a9/0x260
[ 1976.203835]  ? __ia32_sys_read+0xb0/0xb0
[ 1976.204670]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1976.205748]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1976.206809]  do_syscall_64+0x33/0x40
[ 1976.207583]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1976.208632] RIP: 0033:0x7f981e647b19
[ 1976.209389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1976.213132] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1976.214706] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1976.216158] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1976.217618] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1976.219084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1976.220547] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:19:09 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 7)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:19:09 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:09 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9017, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

[ 1976.337244] FAULT_INJECTION: forcing a failure.
[ 1976.337244] name failslab, interval 1, probability 0, space 0, times 0
[ 1976.339967] CPU: 1 PID: 10140 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 1976.341368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1976.343070] Call Trace:
[ 1976.343612]  dump_stack+0x107/0x167
[ 1976.344366]  should_fail.cold+0x5/0xa
[ 1976.345146]  ? create_object.isra.0+0x3a/0xa20
[ 1976.346082]  should_failslab+0x5/0x20
[ 1976.346857]  kmem_cache_alloc+0x5b/0x310
[ 1976.347685]  ? mark_held_locks+0x9e/0xe0
[ 1976.348519]  create_object.isra.0+0x3a/0xa20
[ 1976.349424]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1976.350478]  kmem_cache_alloc_bulk+0x168/0x320
[ 1976.351423]  io_submit_sqes+0x6f76/0x85c0
[ 1976.352271]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1976.353278]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1976.354302]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1976.355292]  ? lock_downgrade+0x6d0/0x6d0
[ 1976.356131]  ? find_held_lock+0x2c/0x110
[ 1976.356950]  ? io_submit_sqes+0x85c0/0x85c0
[ 1976.357838]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1976.358834]  ? wait_for_completion_io+0x270/0x270
[ 1976.359816]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1976.360750]  ? vfs_write+0x354/0xa70
[ 1976.361512]  ? fput_many+0x2f/0x1a0
[ 1976.362274]  ? ksys_write+0x1a9/0x260
[ 1976.363043]  ? __ia32_sys_read+0xb0/0xb0
[ 1976.363872]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1976.364940]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1976.365997]  do_syscall_64+0x33/0x40
[ 1976.366762]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1976.367806] RIP: 0033:0x7f74447cdb19
[ 1976.368561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1976.372311] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1976.373857] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 1976.375322] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1976.376769] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 1976.378230] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1976.379682] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
11:19:22 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x30e, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:19:22 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:19:22 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x2, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:22 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:19:22 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:19:22 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:22 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:22 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

[ 1989.309242] FAULT_INJECTION: forcing a failure.
[ 1989.309242] name failslab, interval 1, probability 0, space 0, times 0
[ 1989.311910] CPU: 0 PID: 10160 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 1989.313288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1989.314944] Call Trace:
[ 1989.315480]  dump_stack+0x107/0x167
[ 1989.316221]  should_fail.cold+0x5/0xa
[ 1989.316990]  ? create_object.isra.0+0x3a/0xa20
[ 1989.317907]  should_failslab+0x5/0x20
[ 1989.318691]  kmem_cache_alloc+0x5b/0x310
[ 1989.319510]  ? mark_held_locks+0x9e/0xe0
[ 1989.320330]  create_object.isra.0+0x3a/0xa20
[ 1989.321214]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1989.322239]  kmem_cache_alloc_bulk+0x168/0x320
[ 1989.323161]  io_submit_sqes+0x6f76/0x85c0
[ 1989.323998]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1989.324990]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1989.325984]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1989.326962]  ? lock_downgrade+0x6d0/0x6d0
[ 1989.327789]  ? find_held_lock+0x2c/0x110
[ 1989.328612]  ? io_submit_sqes+0x85c0/0x85c0
[ 1989.329482]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1989.330465]  ? wait_for_completion_io+0x270/0x270
[ 1989.331433]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1989.332362]  ? vfs_write+0x354/0xa70
[ 1989.333113]  ? fput_many+0x2f/0x1a0
[ 1989.333844]  ? ksys_write+0x1a9/0x260
[ 1989.334620]  ? __ia32_sys_read+0xb0/0xb0
[ 1989.335440]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1989.336492]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1989.337532]  do_syscall_64+0x33/0x40
[ 1989.338295]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1989.339325] RIP: 0033:0x7f74447cdb19
[ 1989.340071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1989.343756] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1989.345275] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 1989.346702] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1989.348121] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 1989.349533] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1989.350971] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
[ 1989.373343] FAULT_INJECTION: forcing a failure.
[ 1989.373343] name failslab, interval 1, probability 0, space 0, times 0
[ 1989.376561] CPU: 0 PID: 10164 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1989.377938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1989.379601] Call Trace:
[ 1989.380129]  dump_stack+0x107/0x167
[ 1989.380855]  should_fail.cold+0x5/0xa
[ 1989.381608]  ? create_object.isra.0+0x3a/0xa20
[ 1989.382530]  ? create_object.isra.0+0x3a/0xa20
[ 1989.383443]  should_failslab+0x5/0x20
[ 1989.384197]  kmem_cache_alloc+0x5b/0x310
[ 1989.385008]  create_object.isra.0+0x3a/0xa20
[ 1989.385879]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1989.386907]  kmem_cache_alloc_node+0x169/0x330
[ 1989.387817]  __alloc_skb+0x6d/0x5b0
[ 1989.388538]  ? tcp_write_queue_purge+0x5a8/0x14b0
[ 1989.389502]  sk_stream_alloc_skb+0x109/0xc30
[ 1989.390397]  tcp_connect+0xef2/0x4550
[ 1989.391159]  ? ktime_get_with_offset+0x221/0x260
[ 1989.392103]  ? recalibrate_cpu_khz+0x10/0x10
[ 1989.392970]  ? ktime_get_with_offset+0x1a8/0x260
[ 1989.393911]  ? __tcp_transmit_skb+0x3600/0x3600
[ 1989.394852]  ? tcp_fastopen_cookie_check+0xb0/0xb0
[ 1989.395819]  ? siphash_1u64+0x13/0x270
[ 1989.396595]  ? secure_ipv4_port_ephemeral+0x190/0x190
[ 1989.397618]  ? xfrm_lookup_route+0x65/0x210
[ 1989.398503]  tcp_v4_connect+0x171b/0x1eb0
[ 1989.399340]  ? tcp_v4_destroy_sock+0x6a0/0x6a0
[ 1989.400238]  ? __lock_acquire+0x1657/0x5b00
[ 1989.401096]  tcp_v6_connect+0x8d7/0x1c40
[ 1989.401909]  ? inet6_sk_rx_dst_set+0x2e0/0x2e0
[ 1989.402827]  ? mark_lock+0xf5/0x2df0
[ 1989.403588]  __inet_stream_connect+0x8d8/0xe70
[ 1989.404494]  ? lock_release+0x680/0x680
[ 1989.405277]  ? lock_downgrade+0x6d0/0x6d0
[ 1989.406096]  ? inet_init_net+0x590/0x590
[ 1989.406910]  ? mark_held_locks+0x9e/0xe0
[ 1989.407719]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1989.408751]  ? __local_bh_enable_ip+0x9d/0x100
[ 1989.409657]  inet_stream_connect+0x53/0xa0
[ 1989.410510]  ? __inet_stream_connect+0xe70/0xe70
[ 1989.411444]  __sys_connect_file+0x15b/0x1a0
[ 1989.412297]  io_connect+0x10d/0x610
[ 1989.413016]  ? io_prep_rw+0x1050/0x1050
[ 1989.413818]  ? __lock_acquire+0xbb1/0x5b00
[ 1989.414674]  io_issue_sqe+0x1611/0x7700
[ 1989.415470]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1989.416507]  ? lock_chain_count+0x20/0x20
[ 1989.417328]  ? __is_insn_slot_addr+0x14c/0x290
[ 1989.418244]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1989.419356]  ? io_connect+0x610/0x610
[ 1989.420115]  ? lock_acquire+0x197/0x470
[ 1989.420901]  ? find_held_lock+0x2c/0x110
[ 1989.421708]  ? __fget_files+0x26d/0x4c0
[ 1989.422519]  ? lock_downgrade+0x6d0/0x6d0
[ 1989.423345]  __io_queue_sqe+0x90/0x9d0
[ 1989.424120]  ? io_issue_sqe+0x7700/0x7700
[ 1989.424954]  io_submit_sqes+0x4461/0x85c0
[ 1989.425991]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1989.426995]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1989.427950]  ? lock_downgrade+0x6d0/0x6d0
[ 1989.428767]  ? find_held_lock+0x2c/0x110
[ 1989.429573]  ? io_submit_sqes+0x85c0/0x85c0
[ 1989.430448]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1989.431404]  ? wait_for_completion_io+0x270/0x270
[ 1989.432362]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1989.433276]  ? vfs_write+0x354/0xa70
[ 1989.434015]  ? fput_many+0x2f/0x1a0
[ 1989.434764]  ? ksys_write+0x1a9/0x260
[ 1989.435520]  ? __ia32_sys_read+0xb0/0xb0
[ 1989.436339]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1989.437376]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1989.438410]  do_syscall_64+0x33/0x40
[ 1989.439156]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1989.440171] RIP: 0033:0x7f981e647b19
[ 1989.440909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1989.444558] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1989.446056] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1989.447486] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1989.448891] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1989.450307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1989.451718] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:19:22 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:22 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:19:22 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:19:22 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:22 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:19:22 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:19:22 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:22 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

[ 1989.697131] FAULT_INJECTION: forcing a failure.
[ 1989.697131] name failslab, interval 1, probability 0, space 0, times 0
[ 1989.699607] CPU: 0 PID: 10186 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1989.700931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1989.702487] Call Trace:
[ 1989.702997]  dump_stack+0x107/0x167
[ 1989.703688]  should_fail.cold+0x5/0xa
[ 1989.704413]  should_failslab+0x5/0x20
[ 1989.705125]  __kmalloc_node_track_caller+0x74/0x3b0
[ 1989.706065]  ? sk_stream_alloc_skb+0x109/0xc30
[ 1989.706950]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1989.708007]  __alloc_skb+0xb1/0x5b0
[ 1989.708723]  sk_stream_alloc_skb+0x109/0xc30
[ 1989.709672]  tcp_connect+0xef2/0x4550
[ 1989.710522]  ? ktime_get_with_offset+0x221/0x260
[ 1989.711446]  ? recalibrate_cpu_khz+0x10/0x10
[ 1989.712360]  ? ktime_get_with_offset+0x1a8/0x260
[ 1989.713248]  ? __tcp_transmit_skb+0x3600/0x3600
[ 1989.714111]  ? tcp_fastopen_cookie_check+0xb0/0xb0
[ 1989.715058]  ? siphash_1u64+0x13/0x270
[ 1989.715788]  ? secure_ipv4_port_ephemeral+0x190/0x190
[ 1989.716784]  ? xfrm_lookup_route+0x65/0x210
[ 1989.717631]  tcp_v4_connect+0x171b/0x1eb0
[ 1989.718467]  ? tcp_v4_destroy_sock+0x6a0/0x6a0
[ 1989.719374]  ? __lock_acquire+0x1657/0x5b00
[ 1989.720272]  tcp_v6_connect+0x8d7/0x1c40
[ 1989.721072]  ? inet6_sk_rx_dst_set+0x2e0/0x2e0
[ 1989.722000]  ? mark_lock+0xf5/0x2df0
[ 1989.722777]  __inet_stream_connect+0x8d8/0xe70
[ 1989.723648]  ? lock_release+0x680/0x680
[ 1989.724418]  ? lock_downgrade+0x6d0/0x6d0
[ 1989.725219]  ? inet_init_net+0x590/0x590
[ 1989.726001]  ? mark_held_locks+0x9e/0xe0
[ 1989.726817]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1989.727818]  ? __local_bh_enable_ip+0x9d/0x100
[ 1989.728709]  inet_stream_connect+0x53/0xa0
[ 1989.729531]  ? __inet_stream_connect+0xe70/0xe70
[ 1989.730453]  __sys_connect_file+0x15b/0x1a0
[ 1989.731284]  io_connect+0x10d/0x610
[ 1989.731979]  ? io_prep_rw+0x1050/0x1050
[ 1989.732759]  ? __lock_acquire+0xbb1/0x5b00
[ 1989.733573]  io_issue_sqe+0x1611/0x7700
[ 1989.734416]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1989.735570]  ? lock_chain_count+0x20/0x20
[ 1989.736480]  ? __is_insn_slot_addr+0x14c/0x290
[ 1989.737323]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1989.738371]  ? io_connect+0x610/0x610
[ 1989.739143]  ? lock_acquire+0x197/0x470
[ 1989.739884]  ? find_held_lock+0x2c/0x110
[ 1989.740739]  ? __fget_files+0x26d/0x4c0
[ 1989.741589]  ? lock_downgrade+0x6d0/0x6d0
[ 1989.742440]  __io_queue_sqe+0x90/0x9d0
[ 1989.743165]  ? io_issue_sqe+0x7700/0x7700
[ 1989.744114]  io_submit_sqes+0x4461/0x85c0
[ 1989.744925]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1989.746046]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1989.746980]  ? lock_downgrade+0x6d0/0x6d0
[ 1989.747910]  ? find_held_lock+0x2c/0x110
[ 1989.748686]  ? io_submit_sqes+0x85c0/0x85c0
[ 1989.749668]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1989.750620]  ? wait_for_completion_io+0x270/0x270
[ 1989.751715]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1989.752590]  ? vfs_write+0x354/0xa70
[ 1989.753423]  ? fput_many+0x2f/0x1a0
[ 1989.754111]  ? ksys_write+0x1a9/0x260
[ 1989.754974]  ? __ia32_sys_read+0xb0/0xb0
[ 1989.755750]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1989.756910]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1989.757884]  do_syscall_64+0x33/0x40
[ 1989.758730]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1989.759745] RIP: 0033:0x7f981e647b19
[ 1989.760483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1989.764057] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1989.765579] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1989.767046] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1989.768375] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1989.769803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1989.771209] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:19:23 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 9)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:19:23 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:23 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:19:23 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:19:23 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x4, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

[ 1990.191049] FAULT_INJECTION: forcing a failure.
[ 1990.191049] name failslab, interval 1, probability 0, space 0, times 0
[ 1990.192717] CPU: 0 PID: 10199 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 1990.193699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1990.194887] Call Trace:
[ 1990.195277]  dump_stack+0x107/0x167
[ 1990.195805]  should_fail.cold+0x5/0xa
[ 1990.196352]  ? create_object.isra.0+0x3a/0xa20
[ 1990.197018]  should_failslab+0x5/0x20
[ 1990.197564]  kmem_cache_alloc+0x5b/0x310
[ 1990.198151]  create_object.isra.0+0x3a/0xa20
[ 1990.198799]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1990.199532]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 1990.200257]  ? sk_stream_alloc_skb+0x109/0xc30
[ 1990.200909]  ? tcp_sync_mss+0x3a2/0xc20
[ 1990.201473]  __alloc_skb+0xb1/0x5b0
[ 1990.202007]  sk_stream_alloc_skb+0x109/0xc30
[ 1990.202649]  tcp_connect+0xef2/0x4550
[ 1990.203198]  ? ktime_get_with_offset+0x221/0x260
[ 1990.203872]  ? recalibrate_cpu_khz+0x10/0x10
[ 1990.204499]  ? ktime_get_with_offset+0x1a8/0x260
[ 1990.205168]  ? __tcp_transmit_skb+0x3600/0x3600
[ 1990.205835]  ? tcp_fastopen_cookie_check+0xb0/0xb0
[ 1990.206556]  ? siphash_1u64+0x13/0x270
[ 1990.207104]  ? secure_ipv4_port_ephemeral+0x190/0x190
[ 1990.207832]  ? xfrm_lookup_route+0x65/0x210
[ 1990.208450]  tcp_v4_connect+0x171b/0x1eb0
[ 1990.209055]  ? tcp_v4_destroy_sock+0x6a0/0x6a0
[ 1990.209707]  ? __lock_acquire+0x1657/0x5b00
[ 1990.210332]  tcp_v6_connect+0x8d7/0x1c40
[ 1990.210907]  ? inet6_sk_rx_dst_set+0x2e0/0x2e0
[ 1990.211555]  ? mark_lock+0xf5/0x2df0
[ 1990.212097]  __inet_stream_connect+0x8d8/0xe70
[ 1990.212745]  ? lock_release+0x680/0x680
[ 1990.213312]  ? lock_downgrade+0x6d0/0x6d0
[ 1990.213897]  ? inet_init_net+0x590/0x590
[ 1990.214494]  ? mark_held_locks+0x9e/0xe0
[ 1990.215073]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1990.215812]  ? __local_bh_enable_ip+0x9d/0x100
[ 1990.216461]  inet_stream_connect+0x53/0xa0
[ 1990.217055]  ? __inet_stream_connect+0xe70/0xe70
[ 1990.217731]  __sys_connect_file+0x15b/0x1a0
[ 1990.218345]  io_connect+0x10d/0x610
[ 1990.218861]  ? io_prep_rw+0x1050/0x1050
[ 1990.219434]  ? __lock_acquire+0xbb1/0x5b00
[ 1990.220035]  io_issue_sqe+0x1611/0x7700
[ 1990.220602]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1990.221332]  ? lock_chain_count+0x20/0x20
[ 1990.221922]  ? __is_insn_slot_addr+0x14c/0x290
[ 1990.222576]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1990.223306]  ? io_connect+0x610/0x610
[ 1990.223840]  ? lock_acquire+0x197/0x470
[ 1990.224400]  ? find_held_lock+0x2c/0x110
[ 1990.224989]  ? __fget_files+0x26d/0x4c0
[ 1990.225556]  ? lock_downgrade+0x6d0/0x6d0
[ 1990.226141]  __io_queue_sqe+0x90/0x9d0
[ 1990.226714]  ? io_issue_sqe+0x7700/0x7700
[ 1990.227303]  io_submit_sqes+0x4461/0x85c0
[ 1990.227902]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1990.228591]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1990.229260]  ? lock_downgrade+0x6d0/0x6d0
[ 1990.229832]  ? find_held_lock+0x2c/0x110
[ 1990.230407]  ? io_submit_sqes+0x85c0/0x85c0
[ 1990.231010]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1990.231680]  ? wait_for_completion_io+0x270/0x270
[ 1990.232359]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1990.233006]  ? vfs_write+0x354/0xa70
[ 1990.233528]  ? fput_many+0x2f/0x1a0
[ 1990.234033]  ? ksys_write+0x1a9/0x260
[ 1990.234662]  ? __ia32_sys_read+0xb0/0xb0
[ 1990.235240]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1990.235962]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1990.236691]  do_syscall_64+0x33/0x40
[ 1990.237220]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1990.237950] RIP: 0033:0x7f981e647b19
[ 1990.238488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1990.241029] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1990.242083] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 1990.243070] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 1990.244056] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1990.245048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1990.246053] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
[ 1990.253897] FAULT_INJECTION: forcing a failure.
[ 1990.253897] name failslab, interval 1, probability 0, space 0, times 0
[ 1990.255546] CPU: 0 PID: 10204 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 1990.256491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1990.257643] Call Trace:
[ 1990.258017]  dump_stack+0x107/0x167
[ 1990.258532]  should_fail.cold+0x5/0xa
[ 1990.259062]  ? create_object.isra.0+0x3a/0xa20
[ 1990.259714]  should_failslab+0x5/0x20
[ 1990.260245]  kmem_cache_alloc+0x5b/0x310
[ 1990.260811]  ? mark_held_locks+0x9e/0xe0
[ 1990.261381]  create_object.isra.0+0x3a/0xa20
[ 1990.261996]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1990.262738]  kmem_cache_alloc_bulk+0x168/0x320
[ 1990.263388]  io_submit_sqes+0x6f76/0x85c0
[ 1990.263966]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1990.264648]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 1990.265339]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 1990.266016]  ? lock_downgrade+0x6d0/0x6d0
[ 1990.266594]  ? find_held_lock+0x2c/0x110
[ 1990.267155]  ? io_submit_sqes+0x85c0/0x85c0
[ 1990.267749]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1990.268412]  ? wait_for_completion_io+0x270/0x270
[ 1990.269069]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1990.269716]  ? vfs_write+0x354/0xa70
[ 1990.270261]  ? fput_many+0x2f/0x1a0
[ 1990.270759]  ? ksys_write+0x1a9/0x260
[ 1990.271278]  ? __ia32_sys_read+0xb0/0xb0
[ 1990.271842]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1990.272568]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1990.273274]  do_syscall_64+0x33/0x40
[ 1990.273783]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 1990.274498] RIP: 0033:0x7f74447cdb19
[ 1990.275009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1990.277551] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1990.278604] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 1990.279591] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 1990.280569] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 1990.281538] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1990.282526] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
11:19:35 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:35 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x8, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:35 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x3)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:19:35 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 10)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:19:35 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:19:35 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:19:35 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:19:35 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

[ 2002.659033] FAULT_INJECTION: forcing a failure.
[ 2002.659033] name failslab, interval 1, probability 0, space 0, times 0
[ 2002.660393] CPU: 1 PID: 10225 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 2002.661128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2002.662043] Call Trace:
[ 2002.662344]  dump_stack+0x107/0x167
[ 2002.662755]  should_fail.cold+0x5/0xa
[ 2002.663173]  ? io_connect+0x3b1/0x610
[ 2002.663585]  should_failslab+0x5/0x20
[ 2002.664008]  __kmalloc+0x72/0x390
[ 2002.664396]  io_connect+0x3b1/0x610
[ 2002.664814]  ? io_prep_rw+0x1050/0x1050
[ 2002.665271]  ? __lock_acquire+0xbb1/0x5b00
[ 2002.665745]  io_issue_sqe+0x1611/0x7700
[ 2002.666175]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2002.666756]  ? lock_chain_count+0x20/0x20
[ 2002.667214]  ? __is_insn_slot_addr+0x14c/0x290
[ 2002.667736]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2002.668317]  ? io_connect+0x610/0x610
[ 2002.668735]  ? lock_acquire+0x197/0x470
[ 2002.669166]  ? find_held_lock+0x2c/0x110
[ 2002.669606]  ? __fget_files+0x26d/0x4c0
[ 2002.670037]  ? lock_downgrade+0x6d0/0x6d0
[ 2002.670493]  __io_queue_sqe+0x90/0x9d0
[ 2002.670920]  ? io_issue_sqe+0x7700/0x7700
[ 2002.671434]  io_submit_sqes+0x4461/0x85c0
[ 2002.671910]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 2002.672488]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 2002.673030]  ? lock_downgrade+0x6d0/0x6d0
[ 2002.673182] FAULT_INJECTION: forcing a failure.
[ 2002.673182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2002.673491]  ? find_held_lock+0x2c/0x110
[ 2002.673504]  ? io_submit_sqes+0x85c0/0x85c0
[ 2002.673520]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2002.673532]  ? wait_for_completion_io+0x270/0x270
[ 2002.673545]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2002.673555]  ? vfs_write+0x354/0xa70
[ 2002.673567]  ? fput_many+0x2f/0x1a0
[ 2002.673577]  ? ksys_write+0x1a9/0x260
[ 2002.673587]  ? __ia32_sys_read+0xb0/0xb0
[ 2002.673599]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2002.673608]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2002.673622]  do_syscall_64+0x33/0x40
[ 2002.673633]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2002.673640] RIP: 0033:0x7f981e647b19
[ 2002.673651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2002.673657] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2002.673668] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 2002.673674] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 2002.673680] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2002.673685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2002.673692] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
[ 2002.703101] CPU: 0 PID: 10230 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 2002.704489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2002.706154] Call Trace:
[ 2002.706706]  dump_stack+0x107/0x167
[ 2002.707451]  should_fail.cold+0x5/0xa
[ 2002.708224]  _copy_from_user+0x2e/0x1b0
[ 2002.709037]  move_addr_to_kernel.part.0+0x31/0x110
[ 2002.710022]  move_addr_to_kernel+0x4f/0x70
[ 2002.710889]  io_connect+0x47a/0x610
[ 2002.711624]  ? io_prep_rw+0x1050/0x1050
[ 2002.712437]  ? lock_acquire+0x197/0x470
[ 2002.713239]  ? __lock_acquire+0xbb1/0x5b00
[ 2002.714093]  io_issue_sqe+0x1611/0x7700
[ 2002.714899]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2002.715949]  ? lock_chain_count+0x20/0x20
[ 2002.716780]  ? __is_insn_slot_addr+0x14c/0x290
[ 2002.717698]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2002.718750]  ? io_connect+0x610/0x610
[ 2002.719516]  ? lock_acquire+0x197/0x470
[ 2002.720312]  ? find_held_lock+0x2c/0x110
[ 2002.721130]  ? __fget_files+0x26d/0x4c0
[ 2002.721929]  ? lock_downgrade+0x6d0/0x6d0
[ 2002.722781]  __io_queue_sqe+0x90/0x9d0
[ 2002.723566]  ? io_issue_sqe+0x7700/0x7700
[ 2002.724411]  io_submit_sqes+0x4461/0x85c0
[ 2002.725269]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 2002.726262]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 2002.727238]  ? lock_downgrade+0x6d0/0x6d0
[ 2002.728064]  ? find_held_lock+0x2c/0x110
[ 2002.728879]  ? io_submit_sqes+0x85c0/0x85c0
[ 2002.729753]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2002.730730]  ? wait_for_completion_io+0x270/0x270
[ 2002.731706]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2002.732638]  ? vfs_write+0x354/0xa70
[ 2002.733383]  ? fput_many+0x2f/0x1a0
[ 2002.734114]  ? ksys_write+0x1a9/0x260
[ 2002.734886]  ? __ia32_sys_read+0xb0/0xb0
[ 2002.735703]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2002.736748]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2002.737790]  do_syscall_64+0x33/0x40
[ 2002.738556]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2002.739601] RIP: 0033:0x7f74447cdb19
[ 2002.740352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2002.744036] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2002.745564] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 2002.747001] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 2002.748427] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 2002.749842] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002
[ 2002.751282] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
11:19:35 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:19:35 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

[ 2002.835955] FAULT_INJECTION: forcing a failure.
[ 2002.835955] name failslab, interval 1, probability 0, space 0, times 0
[ 2002.837550] CPU: 1 PID: 10238 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 2002.838304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2002.839243] Call Trace:
[ 2002.839544]  dump_stack+0x107/0x167
[ 2002.839939]  should_fail.cold+0x5/0xa
[ 2002.840372]  should_failslab+0x5/0x20
[ 2002.840789]  __kmalloc_node_track_caller+0x74/0x3b0
[ 2002.841334]  ? sk_stream_alloc_skb+0x109/0xc30
[ 2002.841824]  ? tcp_sync_mss+0x3a2/0xc20
[ 2002.842254]  __alloc_skb+0xb1/0x5b0
[ 2002.842657]  sk_stream_alloc_skb+0x109/0xc30
[ 2002.843141]  tcp_connect+0xef2/0x4550
[ 2002.843569]  ? ktime_get_with_offset+0x221/0x260
[ 2002.844079]  ? recalibrate_cpu_khz+0x10/0x10
[ 2002.844550]  ? ktime_get_with_offset+0x1a8/0x260
[ 2002.845064]  ? __tcp_transmit_skb+0x3600/0x3600
[ 2002.845564]  ? tcp_fastopen_cookie_check+0xb0/0xb0
[ 2002.846087]  ? siphash_1u64+0x13/0x270
[ 2002.846534]  ? secure_ipv4_port_ephemeral+0x190/0x190
[ 2002.847090]  ? xfrm_lookup_route+0x65/0x210
[ 2002.847555]  tcp_v4_connect+0x171b/0x1eb0
[ 2002.848009]  ? tcp_v4_destroy_sock+0x6a0/0x6a0
[ 2002.848504]  ? __lock_acquire+0x1657/0x5b00
[ 2002.848971]  tcp_v6_connect+0x8d7/0x1c40
[ 2002.849428]  ? inet6_sk_rx_dst_set+0x2e0/0x2e0
[ 2002.849923]  ? mark_lock+0xf5/0x2df0
[ 2002.850337]  __inet_stream_connect+0x8d8/0xe70
[ 2002.850865]  ? lock_release+0x680/0x680
[ 2002.851287]  ? lock_downgrade+0x6d0/0x6d0
[ 2002.851728]  ? inet_init_net+0x590/0x590
[ 2002.852165]  ? mark_held_locks+0x9e/0xe0
[ 2002.852603]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2002.853163]  ? __local_bh_enable_ip+0x9d/0x100
[ 2002.853651]  inet_stream_connect+0x53/0xa0
[ 2002.854097]  ? __inet_stream_connect+0xe70/0xe70
[ 2002.854632]  __sys_connect_file+0x15b/0x1a0
[ 2002.855092]  io_connect+0x10d/0x610
[ 2002.855492]  ? io_prep_rw+0x1050/0x1050
[ 2002.855951]  ? __lock_acquire+0xbb1/0x5b00
[ 2002.856416]  io_issue_sqe+0x1611/0x7700
[ 2002.856855]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2002.857413]  ? lock_chain_count+0x20/0x20
[ 2002.857855]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2002.858424]  ? io_connect+0x610/0x610
[ 2002.858833]  ? lock_acquire+0x197/0x470
[ 2002.859257]  ? find_held_lock+0x2c/0x110
[ 2002.859699]  ? __fget_files+0x26d/0x4c0
[ 2002.860123]  ? lock_downgrade+0x6d0/0x6d0
[ 2002.860574]  __io_queue_sqe+0x90/0x9d0
[ 2002.860991]  ? io_issue_sqe+0x7700/0x7700
[ 2002.861447]  io_submit_sqes+0x4461/0x85c0
[ 2002.861898]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 2002.862446]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 2002.862957]  ? lock_downgrade+0x6d0/0x6d0
[ 2002.863409]  ? find_held_lock+0x2c/0x110
[ 2002.863849]  ? io_submit_sqes+0x85c0/0x85c0
[ 2002.864316]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2002.864849]  ? wait_for_completion_io+0x270/0x270
[ 2002.865377]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2002.865907]  ? vfs_write+0x354/0xa70
[ 2002.866305]  ? fput_many+0x2f/0x1a0
[ 2002.866710]  ? ksys_write+0x1a9/0x260
[ 2002.867120]  ? __ia32_sys_read+0xb0/0xb0
[ 2002.867553]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2002.868100]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2002.868662]  do_syscall_64+0x33/0x40
[ 2002.869058]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2002.869600] RIP: 0033:0x7f981e647b19
[ 2002.869992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2002.871941] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2002.872780] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 2002.873550] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 2002.874310] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2002.875068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2002.875822] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:19:51 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:51 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:19:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:19:51 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x14, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:51 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:19:51 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 11)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:19:51 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x4)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:19:51 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:51 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

[ 2018.602647] FAULT_INJECTION: forcing a failure.
[ 2018.602647] name failslab, interval 1, probability 0, space 0, times 0
[ 2018.605061] CPU: 1 PID: 10262 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 2018.606503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2018.608256] Call Trace:
[ 2018.608809]  dump_stack+0x107/0x167
[ 2018.609571]  should_fail.cold+0x5/0xa
[ 2018.610367]  ? io_connect+0x3b1/0x610
[ 2018.611164]  should_failslab+0x5/0x20
[ 2018.611945]  __kmalloc+0x72/0x390
[ 2018.612664]  io_connect+0x3b1/0x610
[ 2018.613422]  ? io_prep_rw+0x1050/0x1050
[ 2018.614264]  ? __lock_acquire+0xbb1/0x5b00
[ 2018.615161]  io_issue_sqe+0x1611/0x7700
[ 2018.615997]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2018.617081]  ? lock_chain_count+0x20/0x20
[ 2018.617945]  ? __is_insn_slot_addr+0x14c/0x290
[ 2018.618894]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2018.619985]  ? io_connect+0x610/0x610
[ 2018.620774]  ? lock_acquire+0x197/0x470
[ 2018.621578]  ? find_held_lock+0x2c/0x110
[ 2018.622427]  ? __fget_files+0x26d/0x4c0
[ 2018.623250]  ? lock_downgrade+0x6d0/0x6d0
[ 2018.624112]  __io_queue_sqe+0x90/0x9d0
[ 2018.624919]  ? io_issue_sqe+0x7700/0x7700
[ 2018.625788]  io_submit_sqes+0x4461/0x85c0
[ 2018.626688]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 2018.627715]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 2018.628706]  ? lock_downgrade+0x6d0/0x6d0
[ 2018.629558]  ? find_held_lock+0x2c/0x110
[ 2018.630391]  ? io_submit_sqes+0x85c0/0x85c0
[ 2018.631289]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2018.632279]  ? wait_for_completion_io+0x270/0x270
[ 2018.633263]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2018.634220]  ? vfs_write+0x354/0xa70
[ 2018.635045]  ? fput_many+0x2f/0x1a0
[ 2018.635796]  ? ksys_write+0x1a9/0x260
[ 2018.636589]  ? __ia32_sys_read+0xb0/0xb0
[ 2018.637436]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2018.638524]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2018.639609]  do_syscall_64+0x33/0x40
[ 2018.640382]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2018.640750] FAULT_INJECTION: forcing a failure.
[ 2018.640750] name failslab, interval 1, probability 0, space 0, times 0
[ 2018.641447] RIP: 0033:0x7f74447cdb19
[ 2018.641466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2018.641476] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2018.648749] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 2018.650216] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 2018.651683] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 2018.653135] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002
[ 2018.654618] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
[ 2018.656097] CPU: 0 PID: 10264 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 2018.656882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2018.657810] Call Trace:
[ 2018.658112]  dump_stack+0x107/0x167
[ 2018.658592]  should_fail.cold+0x5/0xa
[ 2018.659025]  ? __io_queue_sqe+0x666/0x9d0
[ 2018.659488]  should_failslab+0x5/0x20
[ 2018.659914]  kmem_cache_alloc_trace+0x55/0x320
[ 2018.660423]  __io_queue_sqe+0x666/0x9d0
[ 2018.660875]  ? io_issue_sqe+0x7700/0x7700
[ 2018.661344]  io_submit_sqes+0x4461/0x85c0
[ 2018.661821]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 2018.662369]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 2018.662926]  ? lock_downgrade+0x6d0/0x6d0
[ 2018.663392]  ? find_held_lock+0x2c/0x110
[ 2018.663846]  ? io_submit_sqes+0x85c0/0x85c0
[ 2018.664331]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2018.664939]  ? wait_for_completion_io+0x270/0x270
[ 2018.665481]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2018.666000]  ? vfs_write+0x354/0xa70
[ 2018.666419]  ? fput_many+0x2f/0x1a0
[ 2018.666813]  ? ksys_write+0x1a9/0x260
[ 2018.667249]  ? __ia32_sys_read+0xb0/0xb0
[ 2018.667717]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2018.668306]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2018.668879]  do_syscall_64+0x33/0x40
[ 2018.669294]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2018.669856] RIP: 0033:0x7f981e647b19
[ 2018.670278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2018.672319] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2018.673155] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 2018.673941] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 2018.674728] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2018.675514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2018.676307] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:19:51 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:19:51 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:51 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x30e, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:51 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:19:51 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:51 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:19:51 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:19:51 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:06 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:20:06 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec17]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:06 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8) (fail_nth: 12)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:20:06 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:20:06 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:06 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:20:06 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:06 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x5)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

[ 2034.096116] FAULT_INJECTION: forcing a failure.
[ 2034.096116] name failslab, interval 1, probability 0, space 0, times 0
[ 2034.096152] FAULT_INJECTION: forcing a failure.
[ 2034.096152] name failslab, interval 1, probability 0, space 0, times 0
[ 2034.098713] CPU: 1 PID: 10310 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 2034.098723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2034.098740] Call Trace:
[ 2034.104654]  dump_stack+0x107/0x167
[ 2034.105408]  should_fail.cold+0x5/0xa
[ 2034.106189]  ? create_object.isra.0+0x3a/0xa20
[ 2034.107132]  should_failslab+0x5/0x20
[ 2034.107918]  kmem_cache_alloc+0x5b/0x310
[ 2034.108763]  create_object.isra.0+0x3a/0xa20
[ 2034.109676]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2034.110729]  kmem_cache_alloc_trace+0x151/0x320
[ 2034.111711]  __io_queue_sqe+0x666/0x9d0
[ 2034.112537]  ? io_issue_sqe+0x7700/0x7700
[ 2034.113409]  io_submit_sqes+0x4461/0x85c0
[ 2034.114293]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 2034.115311]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 2034.116307]  ? lock_downgrade+0x6d0/0x6d0
[ 2034.117151]  ? find_held_lock+0x2c/0x110
[ 2034.117999]  ? io_submit_sqes+0x85c0/0x85c0
[ 2034.118913]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2034.119916]  ? wait_for_completion_io+0x270/0x270
[ 2034.120907]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2034.121864]  ? vfs_write+0x354/0xa70
[ 2034.122632]  ? fput_many+0x2f/0x1a0
[ 2034.123392]  ? ksys_write+0x1a9/0x260
[ 2034.124171]  ? __ia32_sys_read+0xb0/0xb0
[ 2034.125008]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2034.126099]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2034.127192]  do_syscall_64+0x33/0x40
[ 2034.127960]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2034.129016] RIP: 0033:0x7f981e647b19
[ 2034.129780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2034.133586] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2034.135160] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 2034.136638] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 2034.138107] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2034.139588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2034.141056] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
[ 2034.142573] CPU: 0 PID: 10311 Comm: syz-executor.7 Not tainted 5.10.197 #1
[ 2034.144026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2034.145686] Call Trace:
[ 2034.146221]  dump_stack+0x107/0x167
[ 2034.146960]  should_fail.cold+0x5/0xa
[ 2034.147722]  ? create_object.isra.0+0x3a/0xa20
[ 2034.148634]  should_failslab+0x5/0x20
[ 2034.149392]  kmem_cache_alloc+0x5b/0x310
[ 2034.150204]  ? l2cap_sock_accept+0x530/0x530
[ 2034.151093]  create_object.isra.0+0x3a/0xa20
[ 2034.151994]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2034.153018]  __kmalloc+0x16e/0x390
[ 2034.153747]  io_connect+0x3b1/0x610
[ 2034.154481]  ? io_prep_rw+0x1050/0x1050
[ 2034.155311]  ? __lock_acquire+0xbb1/0x5b00
[ 2034.156173]  io_issue_sqe+0x1611/0x7700
[ 2034.156992]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2034.158053]  ? lock_chain_count+0x20/0x20
[ 2034.158900]  ? __is_insn_slot_addr+0x14c/0x290
[ 2034.159830]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2034.160885]  ? io_connect+0x610/0x610
[ 2034.161659]  ? lock_acquire+0x197/0x470
[ 2034.162459]  ? find_held_lock+0x2c/0x110
[ 2034.163299]  ? __fget_files+0x26d/0x4c0
[ 2034.164106]  ? lock_downgrade+0x6d0/0x6d0
[ 2034.164949]  __io_queue_sqe+0x90/0x9d0
[ 2034.165740]  ? io_issue_sqe+0x7700/0x7700
[ 2034.166596]  io_submit_sqes+0x4461/0x85c0
[ 2034.167468]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 2034.168470]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 2034.169436]  ? lock_downgrade+0x6d0/0x6d0
[ 2034.170272]  ? find_held_lock+0x2c/0x110
[ 2034.171101]  ? io_submit_sqes+0x85c0/0x85c0
[ 2034.171983]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2034.172953]  ? wait_for_completion_io+0x270/0x270
[ 2034.173918]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2034.174868]  ? vfs_write+0x354/0xa70
[ 2034.175621]  ? fput_many+0x2f/0x1a0
[ 2034.176352]  ? ksys_write+0x1a9/0x260
[ 2034.177101]  ? __ia32_sys_read+0xb0/0xb0
[ 2034.177920]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2034.178962]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2034.180002]  do_syscall_64+0x33/0x40
[ 2034.180742]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2034.181767] RIP: 0033:0x7f74447cdb19
11:20:07 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

[ 2034.182501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2034.186423] RSP: 002b:00007f7441d43188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2034.187933] RAX: ffffffffffffffda RBX: 00007f74448e0f60 RCX: 00007f74447cdb19
[ 2034.189341] RDX: 0000000000009016 RSI: 0000000000007e66 RDI: 0000000000000003
[ 2034.190746] RBP: 00007f7441d431d0 R08: 0000000020000340 R09: 0000000000000008
[ 2034.192168] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002
[ 2034.193573] R13: 00007fff415d6daf R14: 00007f7441d43300 R15: 0000000000022000
11:20:07 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:07 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:07 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:07 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

[ 2034.500179] FAULT_INJECTION: forcing a failure.
[ 2034.500179] name failslab, interval 1, probability 0, space 0, times 0
[ 2034.502958] CPU: 1 PID: 10332 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 2034.504414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2034.506162] Call Trace:
[ 2034.506734]  dump_stack+0x107/0x167
[ 2034.507506]  should_fail.cold+0x5/0xa
[ 2034.508296]  ? create_object.isra.0+0x3a/0xa20
[ 2034.509242]  should_failslab+0x5/0x20
[ 2034.510013]  kmem_cache_alloc+0x5b/0x310
[ 2034.510856]  create_object.isra.0+0x3a/0xa20
[ 2034.511768]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2034.512810]  __kmalloc+0x16e/0x390
[ 2034.513537]  io_connect+0x3b1/0x610
[ 2034.514273]  ? io_prep_rw+0x1050/0x1050
[ 2034.515124]  ? __lock_acquire+0xbb1/0x5b00
[ 2034.515995]  io_issue_sqe+0x1611/0x7700
[ 2034.516813]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2034.517890]  ? lock_chain_count+0x20/0x20
[ 2034.518763]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2034.519825]  ? io_connect+0x610/0x610
[ 2034.520609]  ? lock_acquire+0x197/0x470
[ 2034.521422]  ? find_held_lock+0x2c/0x110
[ 2034.522248]  ? __fget_files+0x26d/0x4c0
[ 2034.523077]  ? lock_downgrade+0x6d0/0x6d0
[ 2034.523931]  __io_queue_sqe+0x90/0x9d0
[ 2034.524727]  ? io_issue_sqe+0x7700/0x7700
[ 2034.525579]  io_submit_sqes+0x4461/0x85c0
[ 2034.526450]  ? __do_sys_io_uring_enter+0x6b5/0x1920
[ 2034.527473]  __do_sys_io_uring_enter+0x6b5/0x1920
[ 2034.528473]  ? lock_downgrade+0x6d0/0x6d0
[ 2034.529314]  ? find_held_lock+0x2c/0x110
[ 2034.530156]  ? io_submit_sqes+0x85c0/0x85c0
[ 2034.531057]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2034.532055]  ? wait_for_completion_io+0x270/0x270
[ 2034.533043]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2034.533999]  ? vfs_write+0x354/0xa70
[ 2034.534783]  ? fput_many+0x2f/0x1a0
[ 2034.535525]  ? ksys_write+0x1a9/0x260
[ 2034.536303]  ? __ia32_sys_read+0xb0/0xb0
[ 2034.537155]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2034.538229]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2034.539300]  do_syscall_64+0x33/0x40
[ 2034.540072]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2034.541120] RIP: 0033:0x7f981e647b19
[ 2034.541885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2034.545676] RSP: 002b:00007f981bbbd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2034.547244] RAX: ffffffffffffffda RBX: 00007f981e75af60 RCX: 00007f981e647b19
[ 2034.548730] RDX: 0000000000000000 RSI: 00000000000076d2 RDI: 0000000000000005
[ 2034.550184] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2034.551630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2034.553069] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:20:19 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:20:19 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:19 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:20:19 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:19 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:19 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:20:19 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:20:19 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x6)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

[ 2046.577746] FAULT_INJECTION: forcing a failure.
[ 2046.577746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2046.580753] CPU: 0 PID: 10344 Comm: syz-executor.6 Not tainted 5.10.197 #1
[ 2046.582183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2046.583896] Call Trace:
[ 2046.584440]  dump_stack+0x107/0x167
[ 2046.585194]  should_fail.cold+0x5/0xa
[ 2046.585978]  _copy_from_user+0x2e/0x1b0
[ 2046.586802]  kstrtouint_from_user+0xbd/0x220
[ 2046.587720]  ? kstrtou8_from_user+0x210/0x210
[ 2046.588646]  ? lock_acquire+0x197/0x470
[ 2046.589464]  ? ksys_write+0x12d/0x260
[ 2046.590255]  proc_fail_nth_write+0x78/0x220
[ 2046.591146]  ? proc_task_getattr+0x1f0/0x1f0
[ 2046.592051]  ? __fget_files+0x296/0x4c0
[ 2046.592875]  ? proc_task_getattr+0x1f0/0x1f0
[ 2046.593769]  vfs_write+0x29a/0xa70
[ 2046.594501]  ksys_write+0x12d/0x260
[ 2046.595256]  ? __ia32_sys_read+0xb0/0xb0
[ 2046.596098]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2046.597169]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2046.598224]  do_syscall_64+0x33/0x40
[ 2046.599001]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2046.600041] RIP: 0033:0x7f981e5fa5ff
[ 2046.600801] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48
[ 2046.604578] RSP: 002b:00007f981bbbd170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2046.606123] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f981e5fa5ff
[ 2046.607580] RDX: 0000000000000001 RSI: 00007f981bbbd1e0 RDI: 0000000000000007
[ 2046.609014] RBP: 00007f981bbbd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2046.610461] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2046.611924] R13: 00007ffe21ce487f R14: 00007f981bbbd300 R15: 0000000000022000
11:20:19 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:19 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:19 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:19 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:19 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:19 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:20:19 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:19 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:32 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:32 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:20:32 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:32 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:20:32 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:20:32 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x3)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:32 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x7)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:20:32 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x8, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:20:32 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:32 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:32 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x2, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:20:33 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:33 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:33 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:20:33 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:33 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:33 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:44 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x30e, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:20:44 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:44 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:20:44 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x4}, {}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:20:44 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x3, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:20:44 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:44 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x30e)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:20:44 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x4)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:20:45 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x2)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:20:45 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:45 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:20:45 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x4, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:20:45 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:00 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:00 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x3)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:21:00 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:21:00 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
shutdown(r3, 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b3499a6ea653a71c59ecbe28982500ecb5c6102750000e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:21:00 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:00 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x8, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:00 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:00 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x5)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:00 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:00 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:00 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xa, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:00 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x0, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:00 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e4a45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d4560"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:21:00 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:00 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x4)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:21:00 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xe, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:00 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x6)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:00 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

[ 2088.399488] perf: interrupt took too long (9770 > 9720), lowering kernel.perf_event_max_sample_rate to 20000
11:21:14 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x5)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:21:14 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x0, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:14 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x3c, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:14 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x13, r4, 0x0)
tee(0xffffffffffffffff, r4, 0x3, 0x0)
fsetxattr$security_selinux(r4, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r4, 0x8000000)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62c, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:21:14 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:21:14 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:21:14 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:14 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x7)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:14 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x4a, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:14 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:14 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xfc, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:14 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:15 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:15 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x14)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:15 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:15 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x1f4, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:15 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x6)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:21:15 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x0, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:15 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:15 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:15 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:21:15 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x13, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000140))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r5 = syz_io_uring_setup(0x762, &(0x7f0000000000)={0x0, 0xf65e, 0x4, 0x3, 0x1bd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd_index=0xa, 0x1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/70, 0x46}], 0x6, 0x19, 0x1, {0x0, r4}}, 0x80000000)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x100010, r5, 0x10000000)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(0x0, r7, &(0x7f0000000540)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)='./file0\x00', 0x28, 0x280100, 0x12345}, 0x401)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000580)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="000007e3da8f4b51220000000000000000000900b4937cc3d35d1f58a13e3a93e01ed28de5ae9fa703db0f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705e96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac444e81941f02b43caa8feedd56ff2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:21:15 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:15 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x218, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:15 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:21:31 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:21:31 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x30e)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:31 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x0, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:31 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x240, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:31 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
io_uring_enter(r0, 0x7d1, 0x5557, 0x3, &(0x7f0000000080)={[0x9]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xf5, 0x0, 0x1, 0xb7}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:21:31 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:31 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:31 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x7)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:21:31 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:31 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:31 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x0, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:31 executing program 2:
r0 = syz_io_uring_setup(0x7f02, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:31 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x0, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:31 executing program 2:
r0 = syz_io_uring_setup(0x7f02, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:31 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x300, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:31 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x0, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:47 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000002c0)=""/105, 0x8})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:21:47 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x0, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:47 executing program 2:
r0 = syz_io_uring_setup(0x7f02, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:47 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:21:47 executing program 0:
r0 = syz_io_uring_setup(0x732e, &(0x7f0000000240)={0x0, 0x0, 0x20, 0xfffffffd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x450d, 0x0, &(0x7f0000000000)={[0x2]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2de73133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:47 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:47 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x30e)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:21:47 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x3e8, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:47 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:47 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:47 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x0, &(0x7f0000000340)={[0xec16]}, 0x8)

11:21:47 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xa00, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:47 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:21:47 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, 0x0, 0x0)

11:21:47 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xe00, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:21:47 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:48 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:21:48 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, 0x0, 0x0)

11:21:48 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:21:48 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x1802, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:00 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x13, r5, 0x0)
tee(0xffffffffffffffff, r5, 0x3, 0x0)
fsetxattr$security_selinux(r5, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r5, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:22:00 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, 0x0, 0x0)

11:22:00 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:00 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:22:00 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x2000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:00 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfdef)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[], 0xfdef)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[], 0xfdef)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r10=>0x0, <r11=>0x0})
ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x12}, {r6, 0x2400}, {r7, 0x100}, {r5, 0x451c}, {r8, 0x8428}, {r5, 0x1753}, {r9, 0x240}], 0x7, &(0x7f0000000380)={r10, r11+10000000}, &(0x7f00000003c0)={[0x2]}, 0x8)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:22:00 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:22:00 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x13, r2, 0x0)
tee(0xffffffffffffffff, r2, 0x3, 0x0)
fsetxattr$security_selinux(r2, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
recvmmsg(r2, &(0x7f0000004ec0)=[{{&(0x7f0000001700)=@can, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/96, 0x60}, {&(0x7f00000001c0)=""/11, 0xb}], 0x4, &(0x7f0000001600)=""/133, 0x85}}, {{0x0, 0x0, &(0x7f0000001a00)}, 0x8}, {{&(0x7f0000001a80)=@caif=@rfm, 0x80, &(0x7f0000001bc0)}, 0x5}, {{&(0x7f0000001c00)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c80)=""/55, 0x37}, {&(0x7f00000016c0)=""/52, 0x34}], 0x2, &(0x7f0000001d40)=""/50, 0x32}, 0x100}, {{&(0x7f0000003e00)=@phonet, 0x80, &(0x7f0000004e80)=[{&(0x7f0000003e80)=""/4096, 0x1000}], 0x1}, 0x7}], 0x5, 0x2, &(0x7f0000005000))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="a142fafe6908d07f21bdd0d4", 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec12]}, 0x8)
r5 = socket(0x8, 0x5, 0x401)
ftruncate(r5, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:00 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:00 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:22:00 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340), 0x8)

11:22:14 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:14 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="000007e3da8f4be504000000327ecd5988bf2aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499adea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df7262b745d803f9b947a2b3ef64e48cf0d42c1fa03219417d2b43caa8feedd56f1438d163c6d2aaa3a35d970691d560f2779d45608f00000049260000000000000000000000000000000000661fe9"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:22:14 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:22:14 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[], 0xfdef)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x762, &(0x7f0000000000)={0x0, 0xf65e, 0x4, 0x3, 0x1bd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r9=>0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x2010, 0xffffffffffffffff, 0x62bb8000)
syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd_index=0xa, 0x1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/70, 0x46}], 0x6, 0x19, 0x1, {0x0, r7}}, 0x80000000)
syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f00000002c0)=@isdn={0x22, 0x26, 0xff, 0x46, 0x7}, 0x0, 0x0, 0x1, {0x0, r7}}, 0xff)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x6, @any, 0x3, 0x1}, 0xe)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:22:14 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340), 0x8)

11:22:14 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded85149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b319da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab0000000000000000e5ffae326b51779e2e8a1c7e434041ef42dd7ae33ea500757eac0a45335c9212731c19b7251cee275aacd991c9ef5d79bd26c5946ebaca35191ebdda5ff5e16b1bd99c9b123fd4c673ae363f91b836444da5a1ed3145b092591a6656bc0e446ac87c3680a47b8514d864cfe2ef078dbb0bb3f36d5fb9cb426bf449675281f643134e8b5b70a4f876bb1bd948d86c3c124676e971"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x9a)

11:22:14 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x3c00, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:14 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:22:14 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:22:14 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340), 0x8)

11:22:14 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x4000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:14 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x0, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:14 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x2000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:14 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:22:14 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x4002, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:14 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x4000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:14 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:22:14 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xa00, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:29 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:22:29 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x0, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:29 executing program 5:
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000005c0), &(0x7f0000000880)=0x4)
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
syz_io_uring_submit(0x0, r2, &(0x7f0000000840)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x5, 0x3b82, &(0x7f0000000800)=[{&(0x7f0000000640)="556f28babe30a031aff8a719cff85d86380cea3898572674b3a7d7271d72891a3880ebb201e6a28104c868bd6bff4d2b8c317edcdcf057cd672795fc35", 0x3d}, {&(0x7f0000000680)="b8edc971bcc1c23e39937890c4d47e127da803f810392f01f1761018037764e8f39de3021c657fd93052c7867eb4713e64930587a87b930d1807789af1e0d7f3acba2c52bae9c2db0de29521be136a28f535d336dfe26805cb38ccf1223ca8d6fd8eeaced220ecd5a2c3c14a4b0177dee471111dc6ddf145914998f4d1cd178d82d9c6021a76163fbb468960a59beb92a924b1f85c845b37121a4c30a287a32f178aeb97158935ff4d742854c14f3fd66bafa508861f397912808a7a71eb241295c17178f8149b8f59aa1753822188f814aeb83048e152e2", 0xd8}, {&(0x7f0000000780)="f616b96d27ae2e6062007a0d3eae16c235746a4eaa974ee5494ef4e5542f70205aaee90b4257bb0101b31def26817f262a670f769ee7c54654bcc41b998840ce61c045bb17ea6175a360e1", 0x4b}], 0x3, 0x8, 0x1, {0x1}}, 0x8)
syz_io_uring_setup(0x2309, &(0x7f00000004c0)={0x0, 0x73d5, 0x2, 0x0, 0xa2}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x13, r5, 0x0)
r7 = syz_io_uring_complete(r6)
syz_io_uring_submit(r6, r2, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x4fb29e82297bb767}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
syz_io_uring_setup(0x1622, &(0x7f00000002c0)={0x0, 0x55a8, 0x1, 0x2, 0x59, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480))
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:22:29 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x4a00, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:29 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x4002, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:29 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x13, r0, 0x0)
tee(0xffffffffffffffff, r0, 0x3, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r1 = syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x318, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r1, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r5, r3, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:22:29 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:22:29 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x13, r5, 0x0)
tee(0xffffffffffffffff, r5, 0x3, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x4, 0x1, 0x4b, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf, 0x4, @perf_config_ext={0x9, 0x5}, 0x810, 0x6, 0x2, 0x3, 0xe6e, 0xeef, 0x7, 0x0, 0x1, 0x0, 0xffffffffffffa513}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
fsetxattr$security_selinux(r5, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x7ff, @none, 0x80, 0x1}, 0xe)

11:22:42 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x0, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:42 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x80fe, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:42 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:22:42 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140))
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f91941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f00"/157])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:22:42 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x0, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:42 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:22:42 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x10, r0, 0x10000000)
preadv2(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/152, 0x98}, {&(0x7f00000007c0)=""/55, 0x37}, {&(0x7f0000000800)=""/32, 0x20}, {&(0x7f0000000840)}], 0x7, 0x8, 0x0, 0x16)
clock_gettime(0x0, &(0x7f0000000000)={<r5=>0x0, <r6=>0x0})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000080)={r5, r6+10000000}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x7fffffff)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:42 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@version_9p2000}], [{@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}})
r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14)
r9 = fork()
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setresuid(0xffffffffffffffff, r10, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000400)="9c30a57b7fbc783e2b817741c07d82790e88ff840014ee176f2ffa1430379d18acf34082a4c5d3350d50da48807885db899b4255f4da38c8146e9abd036bf860aee3b8ea9b0b86ff0d9f8f0c52dbc210e9e1f6f77ffda9947010278338b963fa0ce5d0df3640357c", 0x68}, {&(0x7f0000000480)="90b82c51f847d2f3a6693c0acb3164e2d8976ad36d39abbdf71070579e037d0db5b1e310c79b5d93e3bdc1da6b656ffde69232bf1a70f0471db4253a5e3c47f78e1e9559642f729375e2d5146d5d6ea6d37313c98aa17cbf2475b33776", 0x5d}], 0x2, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r6}}}, @rights={{0x18, 0x1, 0x1, [r3, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10}}}], 0x78, 0x80800}, 0x40420)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:22:42 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x13, r6, 0x0)
syz_io_uring_complete(r7)
r8 = syz_io_uring_setup(0x397e, &(0x7f00000002c0)={0x0, 0x554d, 0x4, 0x0, 0x338}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000540)=<r9=>0x0)
syz_io_uring_submit(r7, r9, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x5, 0x2007, @fd_index=0x5, 0x80000001, &(0x7f0000000580)="028e40a0acaf6db2de081acd517009080705f64e20c54077f1d2d518214cc4cd0d32197108bc6bfac8d50d1fa325202662f8144a1eb2aaaf482b5d5f3d2c24cd7501b2c8c2a425c1de7acd1a9d8f0f888177f746326674bfc0c54f062e7b6b295ef9c98f5ec90c9308c733905e419ba4c72e097274df2803d4e744382450e94c650a7e6e204b8f9ea17391f4fd1dde4bb2cd29b39932d94266d936f5982559f54d1cd08f397125fa721e57ab65e4417632524dea7e022132ba5cc075244821538b85969b5c25fd6d798e01040378149917cae19f", 0xd4, 0x5, 0x1, {0x0, r4}}, 0x200)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x57a6f23e}}, './file0\x00'})
r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000740)=ANY=[@ANYBLOB="010d0000bc69e8aa7c2ba53f", @ANYRES32=<r11=>r6, @ANYBLOB="03000000000000002e2f66696c653000"])
signalfd4(r11, &(0x7f0000000700)={[0x100000001]}, 0x8, 0x0)
syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:42 executing program 0:
r0 = syz_io_uring_setup(0x7f05, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[], 0xfdef)
syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:42 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xc0fe, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:42 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:22:42 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x3)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:42 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
r5 = inotify_init1(0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[], 0xfdef)
r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c, 0x800)
r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, r5, r6, r7, r8], 0x5}, 0x1a0)

11:22:42 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xe803, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:43 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xf401, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:57 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:22:57 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x80fe, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:57 executing program 0:
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x20, 0x0, 0x200, 0x0, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8044000}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8018080}, 0xc001)
r3 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:57 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xfc00, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:57 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2007, @fd_index=0x8, 0x0, 0x6e508217, 0x55b, 0x4, 0x0, {0x3}}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:22:57 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101}, 0x6)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x1, 0x1}, 0x808b)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0xfdef)
syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x6, 0x0, r5, &(0x7f0000000440), &(0x7f0000000140)='./file0\x00', 0x200, 0x800, 0xfda589f7702eb32}, 0xffffff42)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000b, 0x13, r0, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:22:57 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x0, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:57 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:22:57 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
r5 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x20000, 0x4a, 0x2}, 0x18)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000440)={0x1, 0x18, '\x00', 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0]})
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:22:57 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x0, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:57 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xfe80, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:58 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000002c0)=0x6)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000017020007002e2f62696c6530ff"], 0x10)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:22:58 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xfec0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:58 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x4, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:22:58 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0)
fadvise64(r5, 0x4, 0x9, 0x2)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:58 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:22:58 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {<r5=>0xffffffffffffffff}}, './file0\x00'})
io_uring_enter(r5, 0x1d3a, 0xd7ed, 0x6, &(0x7f00000002c0)={[0xb4df]}, 0x8)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e588c82aa46edcb187671f0b5a325ef51908000000001f0000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f0000000000000000"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:22:58 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x0, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:22:58 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xff00, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:58 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x3e8, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:22:58 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xff0f, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:11 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:23:11 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x0, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:23:11 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'veth1_to_team\x00'})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x13, r5, 0x0)
tee(0xffffffffffffffff, r5, 0x3, 0x0)
fsetxattr$security_selinux(r5, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r6, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:23:11 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:23:11 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x3e8, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:11 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x1000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:11 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x30, r0, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r7, 0x0, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd_index=0xa, 0x1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/70, 0x46}], 0x6, 0x19, 0x1, {0x0, r6}}, 0x80000000)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r3, 0x2, 0x0, 0x80000000, 0x0, 0x1, {0x0, r6}}, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000540)=ANY=[@ANYBLOB="207125006150dd09b17fc316e2638498784e4c09756ade4e46a01b99b1fbd7a909691ab5d985b07392b9330a8b9a8ab11cf15a164c45141fcf81ab2ea346a4a3056373276278fdd8824a8f611c4f5275afa390df9035d389428fddadb2e734a3b88ab17488ed30573756201cbdaaf55c2a830087341b24412d016da130189f363c6453aa31", @ANYRES16=r9, @ANYBLOB="0100000090bdc8af4735472475f456f2e5000000000000310000"], 0x20}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf, 0x1, {0x0, r6}}, 0x5)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:23:11 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x29d}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:23:11 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x2000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:11 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x68ae, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x1, 0x1}, 0x808b)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x13, r7, 0x0)
tee(0xffffffffffffffff, r7, 0x3, 0x0)
fsetxattr$security_selinux(r7, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd=r7, 0x9, 0x0, 0x0, 0x5, 0x0, {0x2, r5}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="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"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:23:11 executing program 5:
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:23:11 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x1000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:11 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x3000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:11 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x100)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0xfdef)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[], 0xfdef)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r5, 0x20000009, {0x0, r6}, 0x3, 0x0, 0x0, {0x0, 0x0, r7}}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)
getpgid(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x23b6896f960536b2, 0x80010, 0xffffffffffffffff, 0x0)

11:23:11 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x0, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:23:11 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x4000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:26 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:23:26 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r5=>0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x5b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x202, 0x0, 0x80, 0x0, 0x0, 0x20000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[], 0xfdef)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000002c0)={0x3, 0x80, 0x81, 0x20, 0x7, 0x2e, 0x0, 0x4, 0x10008, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x8a8e}, 0x1000, 0x101, 0x8, 0x1, 0x800, 0x10, 0x3, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
io_uring_enter(r0, 0x22df, 0x2083, 0x3, &(0x7f0000000000)={[0x7]}, 0x8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:23:26 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x0, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:23:26 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x8000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:26 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x2000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:26 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:23:26 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x1}}, './file0\x00'})
io_uring_enter(r4, 0x11eb, 0x6507, 0x2, &(0x7f00000002c0)={[0x400]}, 0x8)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:23:26 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000380)={'gre0\x00', <r6=>0x0, 0x40, 0x80, 0x9, 0x8, {{0x1d, 0x4, 0x3, 0x4, 0x74, 0x66, 0x0, 0x80, 0x2f, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x1f, 0x3, [{0x1, 0x2}, {0x0, 0x12, "a241c8cf5864c12d6548013ce83d1df7"}, {0x1, 0x5, "e95115"}]}, @generic={0x44, 0xc, "f4455781c31ec385632f"}, @rr={0x7, 0x7, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @end, @end, @generic={0x83, 0x11, "f08827bf7187a7e1203fbc5dff840d"}, @timestamp={0x44, 0x18, 0x52, 0x0, 0x9, [0xffffffff, 0x77c, 0x456, 0x8d, 0x20]}]}}}}})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r7=>r3, {0x11f}}, './file0\x00'})
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000326bd7000ffdbdf2501000000000000000941000000140018000008007564703a73797a3000000000f645105c6ba9e37ed745c4f6e68723ff75a700dcbd0fdbe6246845eadd6e47389032fa97e4eae99efe5ef9f396a23e814b4c591bf5c076138a6ea1a5863c859bbd89f3d6e939ad97bffc9aedd14ab11c11ac9013ff260de7d352d1ef9e865710d1d52f31829a61e471f8b4b7050000566c9ee1989c85655953e83f17cee26c0511551d407accedc2c96d2f0fca7bf779bdfc8132fc08390d6261e3630cb29def"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r9, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', <r10=>0x0, 0x4, 0x1f, 0x3, 0x9, 0x40, @private1, @mcast2, 0x7, 0x7800, 0x80000000, 0x2c}})
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:23:26 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x3d54, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='io.stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000003, 0x50, r5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r7 = getpgrp(0xffffffffffffffff)
bind$bt_l2cap(r3, &(0x7f00000005c0)={0x1f, 0x0, @any, 0x9aed, 0x2}, 0xe)
syz_io_uring_setup(0x3f59, &(0x7f00000002c0)={0x0, 0x6313, 0x8, 0x2, 0x10209, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r1, r8, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r4}}, 0x2)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16b8e, 0x0, 0x0, 0x0, 0x2, 0x20000000}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x7fff}}, './file0\x00'})

11:23:27 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xa000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:27 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xff0f, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:27 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x300, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:27 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0xfdef)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
io_setup(0xf7, &(0x7f0000000000)=<r6=>0x0)
r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
io_submit(r6, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r8, &(0x7f0000000280)=ANY=[], 0xfdef)
io_cancel(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x6b, r3, &(0x7f0000000380)="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", 0x1000, 0x10001, 0x0, 0x2, r8}, &(0x7f0000000080))
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:23:27 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0xe000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

[ 2234.601539] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s
[ 2234.603558] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 2234.604948] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 2234.606305] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 2234.607884] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[ 2234.612784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 2234.614158] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2234.617481] Buffer I/O error on dev sr0, logical block 0, async page read
[ 2234.621029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 2234.622281] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2234.624563] Buffer I/O error on dev sr0, logical block 1, async page read
[ 2234.626328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 2234.628200] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2234.630325] Buffer I/O error on dev sr0, logical block 2, async page read
[ 2234.632039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 2234.633279] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2234.635435] Buffer I/O error on dev sr0, logical block 3, async page read
[ 2234.637040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 2234.638302] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2234.640460] Buffer I/O error on dev sr0, logical block 4, async page read
[ 2234.671644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 2234.672649] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2234.673791] Buffer I/O error on dev sr0, logical block 5, async page read
[ 2234.674677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 2234.675721] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2234.676822] Buffer I/O error on dev sr0, logical block 6, async page read
[ 2234.680075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 2234.680703] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2234.681822] Buffer I/O error on dev sr0, logical block 7, async page read
11:23:27 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x300, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:27 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x18020000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

[ 2236.291364] Bluetooth: hci7: command 0x0405 tx timeout
11:23:42 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x1f4, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:42 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef51d0800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b7efff0f0000e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd6a09f11659f12f60f2779d45608feea6c581bc3e4fb0de95c7ad78959d17fa9d07f516cf596e234d1b0000000000"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:23:42 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'ip6_vti0\x00'}}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0)
syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000000800)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101}, 0x6)
syz_io_uring_submit(r8, r6, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0xc82, 0x5, 0x15, 0x0, {0x2}}, 0x808b)
syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x2000, @fd_index=0x1, 0x10001, &(0x7f00000005c0)=[{&(0x7f00000003c0)="0b6d98a581b111d20879faaee5a982245b12406abc7160b8e6004cf4a3affdfe162b1f578f3c8ed89674c66bc9a19cf6d62c332c6b1ef1844b656e2e1a284bf2c5ea94d40571827087bb48c6f2ce7f35c02419cd00934339070bb5b6ca2980cdd9614533c853f9c5a72ef273a541d6b510d08535ac4e169cf5fe8bbd9458c0ea308ff9e02bd4546bf58de522117f803acae60f65a94b61ccf2b492314aeb5b5b8832b564acafdf3078a5b3bf8a4b1b308a5751c77b9a1a8bb7f9101bfeda4000"/201, 0xc9}, {&(0x7f00000004c0)="7832661c819104810788afcaacd11e92aef2d167a007b7173661ec", 0x1b}, {&(0x7f0000000500)="16309b90a76489549774307bfd47b13acf5dc2491c8117c25a9d0fa2d43c69349825dfedc045f82eab7e68cbaa80d19e23aa672852eb18bc04640ab70fb1bff26136eb421771391657db558fa69c11983b39fadb92aa8ff4883b011405edcec3cb190dc7e17f96003743d5c8481bd151109479a2489874a851bb92c599dfce9b53510bfdb9b0c18c5d5dc9255ea9", 0x8e}], 0x3, 0x10, 0x1}, 0x10001)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x6000, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x1, 0x1}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:23:42 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x0, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:23:42 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])

11:23:42 executing program 0:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x0, 0x4, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x762, &(0x7f0000000000)={0x0, 0xf65e, 0x4, 0x3, 0x1bd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd_index=0xa, 0x1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/70, 0x46}], 0x6, 0x19, 0x1, {0x0, r4}}, 0x80000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0xf03, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r4}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:23:42 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x20000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:42 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:23:42 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x13, r5, 0x0)
tee(0xffffffffffffffff, r5, 0x3, 0x0)
fsetxattr$security_selinux(r5, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
io_uring_enter(r5, 0x8f, 0xd159, 0x0, &(0x7f0000000140)={[0x200]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d373c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45b000060b4f9c0f78e1778f705a96ef7d5a826cd19f0f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f8900000000000000"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:23:42 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
shutdown(r3, 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b3499a6ea653a71c59ecbe28982500ecb5c6102750000e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:23:42 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0xfdef)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

11:23:42 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x3c000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:42 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x40000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:42 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
shutdown(r3, 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b3499a6ea653a71c59ecbe28982500ecb5c6102750000e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:23:42 executing program 5:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dd2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
fcntl$lock(r5, 0x24, &(0x7f0000000140)={0x3, 0x4, 0x1, 0x200})
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608f"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:23:42 executing program 1:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0)

11:23:43 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x40020000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:43 executing program 2:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0x0, 0x1}, 0x100)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b2499a6ea653a71c59ecbe28982b903b711e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2779d45608fe31b51e8e3477aff2dc53133b322da40abaf48cbccd6b0b34b86dff42b629e3e03ce20c4cc58f0a5d4820d095db7e15efbee67c7db00430778ccb99d03fef6cd9e20b774980d5fa9b818da9951f1f3b6d66638f91547a56147df264846c3ec353f9ded61d035b6c007fc948cca7a03d9ff76fe54df542f81d2b9dbd7e540c2c98b1999095f7ea4844f1d6870a3496a3e4895a0e89c5fd434be31aa5323f5c2ebe6a9461c9a9c3e50613e32778621076794343e091037a2d1b027638b0dfd3b3d4089b0ffba0c5900e3292fb9143b048f9df5e6a55ff1bac8177dea3805598bf4abfd44bb8c2eb319553a72a816b0e85807330d14f276e229f83588252cf30cfaa09cab"])

11:23:43 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{r4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x408}, {0xffffffffffffffff, 0x108}], 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)

11:23:43 executing program 3:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
shutdown(r3, 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000007e3da8f4b5122000000000000000000cac4b4937cc3d3730f9be8e50ca23a91327ecd5988c82aa46edcb187671f0b5a325ef5190800000000000000a34f16f7326b3499a6ea653a71c59ecbe28982500ecb5c6102750000e45bdcf1da72f9c0f78e1778f705a96ef7f5df84ce3fded803f9b947a2b3ef64225149e61ac4ef171941f02b43caa8feedd56f1438d163c6d2bd2a09f11659f12f60f2"])
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xb7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)

11:23:43 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002a40)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
io_uring_enter(r0, 0x76d2, 0x4a000000, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8)
fallocate(r5, 0x8, 0x0, 0x8000)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'})

11:23:43 executing program 7:
r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x9, {}, 0x4, 0x4, 0x1}, 0x100)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x762, &(0x7f0000000000)={0x0, 0xf65e, 0x4, 0x3, 0x1bd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd_index=0xa, 0x1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/70, 0x46}], 0x6, 0x19, 0x1, {0x0, r5}}, 0x80000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd, 0x1, 0x7c, 0x5, 0x0, 0x1, {0x3, r5}}, 0x2)
io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340)={[0xec16]}, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff})
r9 = gettid()
sendmsg$unix(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="a2", 0x1}], 0xc0, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r9}}}], 0x20}, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x8, 0x0, 0x46, 0x80, 0x0, 0x3, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xed9b, 0x2, @perf_config_ext={0xc62, 0x40}, 0x400, 0x1, 0x6, 0x7, 0x0, 0x4, 0x1, 0x0, 0xa37, 0x0, 0x8}, r9, 0x3, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x1c3, 0x5, 0x7ff, 0x14}, 0x3ff)
write$bt_hci(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6)

[ 2268.165567] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 2268.167923] CPU: 0 PID: 256 Comm: syz-fuzzer Not tainted 5.10.197 #1
[ 2268.169232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2268.170925] Call Trace:
[ 2268.171467]  dump_stack+0x107/0x167
[ 2268.172204]  dump_header+0x106/0x65e
[ 2268.172960]  oom_kill_process.cold+0x10/0x15
[ 2268.173862]  out_of_memory+0x1149/0x1440
[ 2268.174695]  ? oom_killer_disable+0x280/0x280
[ 2268.175615]  ? mutex_trylock+0x237/0x2b0
[ 2268.176435]  ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130
[ 2268.177634]  __alloc_pages_slowpath.constprop.0+0x1b25/0x2130
[ 2268.178828]  ? lock_acquire+0x107/0x470
[ 2268.179633]  ? warn_alloc+0x190/0x190
[ 2268.180430]  __alloc_pages_nodemask+0x51d/0x600
[ 2268.181378]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 2268.182609]  ? find_get_entry+0x2c8/0x740
[ 2268.183464]  alloc_pages_current+0x187/0x280
[ 2268.184359]  __page_cache_alloc+0x2d2/0x360
[ 2268.185230]  pagecache_get_page+0x2c7/0xc80
[ 2268.186119]  filemap_fault+0x177d/0x2210
[ 2268.186956]  ? read_cache_page_gfp+0x30/0x30
[ 2268.187848]  ? replace_page_cache_page+0x1200/0x1200
[ 2268.188877]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 2268.189957]  ext4_filemap_fault+0x87/0xc0
[ 2268.190796]  __do_fault+0x113/0x410
[ 2268.191538]  handle_mm_fault+0x1e53/0x3500
[ 2268.192397]  ? _copy_from_user+0xfb/0x1b0
[ 2268.193239]  ? __pmd_alloc+0x5e0/0x5e0
[ 2268.194052]  ? vmacache_find+0x55/0x2a0
[ 2268.194859]  ? vmacache_update+0xce/0x140
[ 2268.195707]  do_user_addr_fault+0x56e/0xc60
[ 2268.196584]  exc_page_fault+0xa2/0x1a0
[ 2268.197372]  ? asm_exc_page_fault+0x8/0x30
[ 2268.198233]  asm_exc_page_fault+0x1e/0x30
[ 2268.199071] RIP: 0033:0x466533
[ 2268.199721] Code: Unable to access opcode bytes at RIP 0x466509.
[ 2268.200940] RSP: 002b:000000c00003fe80 EFLAGS: 00010202
[ 2268.202039] RAX: ffffffffffffff92 RBX: 000000003b979634 RCX: 0000000000466533
[ 2268.203480] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78
[ 2268.204917] RBP: 000000c00003fec8 R08: 0000000000000000 R09: 0000000000000000
[ 2268.206367] R10: 000000c00003feb8 R11: 0000000000000202 R12: 0000000000438880
[ 2268.207806] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000
[ 2268.210704] Mem-Info:
[ 2268.211240] active_anon:16916 inactive_anon:57051 isolated_anon:0
[ 2268.211240]  active_file:3 inactive_file:0 isolated_file:0
[ 2268.211240]  unevictable:0 dirty:0 writeback:0
[ 2268.211240]  slab_reclaimable:8278 slab_unreclaimable:252710
[ 2268.211240]  mapped:69634 shmem:110 pagetables:1157 bounce:0
[ 2268.211240]  free:2785 free_pcp:168 free_cma:0
[ 2268.217707] Node 0 active_anon:67664kB inactive_anon:228204kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:440kB writeback_tmp:0kB kernel_stack:3840kB all_unreclaimable? yes
[ 2268.222329] Node 0 DMA free:6512kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2268.227547] lowmem_reserve[]: 0 1616 1616 1616
[ 2268.228531] Node 0 DMA32 free:4628kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:67664kB inactive_anon:228204kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:4628kB bounce:0kB free_pcp:672kB local_pcp:236kB free_cma:0kB
[ 2268.234268] lowmem_reserve[]: 0 0 0 0
[ 2268.235072] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6512kB
[ 2268.237886] Node 0 DMA32: 697*4kB (UME) 101*8kB (UME) 29*16kB (M) 14*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4572kB
[ 2268.240748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2268.242503] 113 total pagecache pages
[ 2268.243300] 0 pages in swap cache
[ 2268.243996] Swap cache stats: add 0, delete 0, find 0/0
[ 2268.245085] Free swap  = 0kB
[ 2268.245720] Total swap = 0kB
[ 2268.246362] 524158 pages RAM
[ 2268.246967] 0 pages HighMem/MovableOnly
[ 2268.247784] 105056 pages reserved
[ 2268.248560] Unreclaimable slab info:
[ 2268.249594] Name                      Used          Total
[ 2268.250778] pid_3                      7KB          7KB
[ 2268.251871] pid_2                     41KB         56KB
[ 2268.252961] IEEE-802.15.4-MAC         63KB         63KB
[ 2268.254066] IEEE-802.15.4-RAW         31KB         31KB
[ 2268.255151] p9_req_t                   8KB          8KB
[ 2268.256265] ip6-frags                 15KB         15KB
[ 2268.257356] fib6_nodes                28KB         28KB
[ 2268.258471] ip6_dst_cache             41KB         41KB
[ 2268.259564] PINGv6                    63KB         63KB
[ 2268.260661] RAWv6                    283KB        283KB
[ 2268.261760] UDPLITEv6                 62KB         62KB
[ 2268.262859] UDPv6                     62KB         62KB
[ 2268.263952] TCPv6                     62KB         62KB
[ 2268.265055] scsi_sense_cache           8KB          8KB
[ 2268.266151] sd_ext_cdb                 3KB          3KB
[ 2268.267244] virtio_scsi_cmd           16KB         16KB
[ 2268.268361] sgpool-128                59KB         59KB
[ 2268.269459] sgpool-64                 63KB         63KB
[ 2268.270563] sgpool-32                 47KB         47KB
[ 2268.271636] sgpool-16                 30KB         30KB
[ 2268.272747] sgpool-8                  63KB         63KB
[ 2268.273879] io_kiocb                 352KB        431KB
[ 2268.274968] mqueue_inode_cache         62KB         62KB
[ 2268.276079] nfs_commit_data           15KB         15KB
[ 2268.277193] nfs_write_data            47KB         47KB
[ 2268.278309] jbd2_inode                11KB         11KB
[ 2268.279410] ext4_system_zone           3KB          3KB
[ 2268.280502] ext4_io_end_vec            7KB          7KB
[ 2268.281597] ext4_bio_post_read_ctx         15KB         15KB
[ 2268.282782] kioctx                    31KB         31KB
[ 2268.283867] aio_kiocb                  7KB          7KB
[ 2268.284959] bio-2                      4KB          4KB
[ 2268.286056] fasync_cache               7KB          7KB
[ 2268.287149] pid_namespace              7KB          7KB
[ 2268.288243] rpc_buffers               31KB         31KB
[ 2268.289352] rpc_tasks                  3KB          3KB
[ 2268.290467] UNIX                     222KB        320KB
[ 2268.291554] UDP-Lite                  31KB         31KB
[ 2268.292646] tcp_bind_bucket            8KB          8KB
[ 2268.293749] ip_fib_trie                8KB          8KB
[ 2268.294848] ip_fib_alias              19KB         19KB
[ 2268.295942] ip_dst_cache              32KB         32KB
[ 2268.297034] PING                      62KB         62KB
[ 2268.298141] RAW                       93KB         93KB
[ 2268.299265] UDP                      283KB        283KB
[ 2268.300362] request_sock_TCP           7KB          7KB
[ 2268.301450] TCP                       60KB         60KB
[ 2268.302554] hugetlbfs_inode_cache         30KB         30KB
[ 2268.303720] bio-1                     11KB         11KB
[ 2268.304811] eventpoll_pwq             23KB         23KB
[ 2268.305920] eventpoll_epi             39KB         39KB
[ 2268.307018] inotify_inode_mark         58KB         58KB
[ 2268.308125] request_queue             60KB         60KB
[ 2268.309239] blkdev_ioc                18KB         18KB
[ 2268.310370] bio-0                     52KB         52KB
[ 2268.311451] biovec-max               714KB        714KB
[ 2268.312541] biovec-128                31KB         31KB
[ 2268.313655] biovec-64                189KB        189KB
[ 2268.314749] biovec-16                 30KB         30KB
[ 2268.315842] user_namespace            31KB         31KB
[ 2268.316928] uid_cache                  8KB          8KB
[ 2268.318028] dmaengine-unmap-2          4KB          4KB
[ 2268.319116] audit_buffer               7KB          7KB
[ 2268.320209] skbuff_fclone_cache         82KB         82KB
[ 2268.321331] skbuff_head_cache       1755KB       1755KB
[ 2268.322454] configfs_dir_cache          4KB          4KB
[ 2268.323566] file_lock_cache           66KB         66KB
[ 2268.324661] file_lock_ctx              7KB          7KB
[ 2268.325770] fsnotify_mark_connector         20KB         20KB
[ 2268.326966] net_namespace            143KB        143KB
[ 2268.328045] task_delay_info          135KB        135KB
[ 2268.329139] taskstats                 46KB         46KB
[ 2268.330230] proc_dir_entry           495KB        495KB
[ 2268.331329] pde_opener                31KB         31KB
[ 2268.332435] seq_file                  41KB         45KB
[ 2268.333544] sigqueue                  74KB         74KB
[ 2268.334660] shmem_inode_cache       1186KB       1257KB
[ 2268.335762] kernfs_iattrs_cache        212KB        212KB
[ 2268.336885] kernfs_node_cache       5350KB       5380KB
[ 2268.337985] mnt_cache                181KB        181KB
[ 2268.339105] filp                     942KB       1657KB
[ 2268.340200] names_cache             5087KB       5295KB
[ 2268.341292] hashtab_node             278KB        278KB
[ 2268.342389] ebitmap_node            1149KB       1149KB
[ 2268.343483] avtab_node              4976KB       4976KB
[ 2268.344615] avc_node                  31KB         31KB
[ 2268.345734] lsm_inode_cache         3166KB       3257KB
[ 2268.346833] lsm_file_cache            61KB        164KB
[ 2268.347924] key_jar                   31KB         31KB
[ 2268.349014] uts_namespace             15KB         15KB
[ 2268.350111] nsproxy                   19KB         19KB
[ 2268.351226] vm_area_struct           783KB       1052KB
[ 2268.352317] fs_cache                  64KB         64KB
[ 2268.353406] files_cache              255KB        255KB
[ 2268.354513] signal_cache             258KB        401KB
[ 2268.355601] sighand_cache            275KB        330KB
[ 2268.356691] task_struct             1004KB       1312KB
[ 2268.357795] cred_jar                  74KB        176KB
[ 2268.358888] anon_vma_chain           199KB        255KB
[ 2268.359985] anon_vma                 235KB        255KB
[ 2268.361071] pid                       81KB        101KB
[ 2268.362173] Acpi-Operand             231KB        269KB
[ 2268.363267] Acpi-ParseExt             23KB         23KB
[ 2268.364345] Acpi-Parse               150KB        166KB
[ 2268.365435] Acpi-State               216KB        232KB
[ 2268.366542] Acpi-Namespace            24KB         24KB
[ 2268.367625] numa_policy                3KB          3KB
[ 2268.368710] trace_event_file         163KB        163KB
[ 2268.369805] ftrace_event_field        280KB        280KB
[ 2268.370907] pool_workqueue            32KB         32KB
[ 2268.371987] task_group                16KB         16KB
[ 2268.373071] mm_struct                260KB        315KB
[ 2268.374172] vmap_area                535KB        535KB
[ 2268.375273] page->ptl                214KB        248KB
[ 2268.376354] kmemleak_scan_area        270KB        270KB
[ 2268.377452] kmemleak_object       775716KB     775716KB
[ 2268.378557] kmalloc-8k              4864KB       4960KB
[ 2268.379658] kmalloc-4k              6760KB       8000KB
[ 2268.380767] kmalloc-2k              4492KB       4960KB
[ 2268.381869] kmalloc-1k              2238KB       3008KB
[ 2268.382960] kmalloc-512            30288KB      30288KB
[ 2268.384046] kmalloc-256             1316KB       1336KB
[ 2268.385137] kmalloc-192              486KB        492KB
[ 2268.386304] kmalloc-128              710KB       1276KB
[ 2268.387448] kmalloc-96               797KB       1504KB
[ 2268.388536] kmalloc-64              1457KB       1480KB
[ 2268.389628] kmalloc-32             92800KB      92800KB
[ 2268.390727] kmalloc-16               372KB        372KB
[ 2268.391816] kmalloc-8                285KB        326KB
[ 2268.392920] kmem_cache_node           47KB         47KB
[ 2268.394058] kmem_cache                78KB         78KB
[ 2268.395144] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=256,uid=0
[ 2268.399825] Out of memory (oom_kill_allocating_task): Killed process 255 (syz-fuzzer) total-vm:1239316kB, anon-rss:261632kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:904kB oom_score_adj:0
[ 2268.530364] cron invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 2268.531414] CPU: 1 PID: 169 Comm: cron Not tainted 5.10.197 #1
[ 2268.532046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2268.532920] Call Trace:
[ 2268.533212]  dump_stack+0x107/0x167
[ 2268.533602]  dump_header+0x106/0x65e
[ 2268.534002]  oom_kill_process.cold+0x10/0x15
[ 2268.534481]  out_of_memory+0x1149/0x1440
[ 2268.534917]  ? oom_killer_disable+0x280/0x280
[ 2268.535399]  ? mutex_trylock+0x237/0x2b0
[ 2268.535828]  ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130
[ 2268.536459]  __alloc_pages_slowpath.constprop.0+0x1b25/0x2130
[ 2268.537083]  ? lock_acquire+0x107/0x470
[ 2268.537506]  ? warn_alloc+0x190/0x190
[ 2268.537929]  __alloc_pages_nodemask+0x51d/0x600
[ 2268.538431]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 2268.539058]  ? find_get_entry+0x2c8/0x740
[ 2268.539500]  alloc_pages_current+0x187/0x280
[ 2268.539961]  __page_cache_alloc+0x2d2/0x360
[ 2268.540415]  pagecache_get_page+0x2c7/0xc80
[ 2268.540865]  filemap_fault+0x177d/0x2210
[ 2268.541298]  ? read_cache_page_gfp+0x30/0x30
[ 2268.541768]  ? replace_page_cache_page+0x1200/0x1200
[ 2268.542321]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 2268.542875]  ext4_filemap_fault+0x87/0xc0
[ 2268.543315]  __do_fault+0x113/0x410
[ 2268.543696]  handle_mm_fault+0x1e53/0x3500
[ 2268.544146]  ? __pmd_alloc+0x5e0/0x5e0
[ 2268.544560]  ? vmacache_find+0x55/0x2a0
[ 2268.544972]  ? vmacache_update+0xce/0x140
[ 2268.545418]  do_user_addr_fault+0x56e/0xc60
[ 2268.545882]  exc_page_fault+0xa2/0x1a0
[ 2268.546292]  ? asm_exc_page_fault+0x8/0x30
[ 2268.546743]  asm_exc_page_fault+0x1e/0x30
[ 2268.547174] RIP: 0033:0x7ff0e526fc0a
[ 2268.547574] Code: Unable to access opcode bytes at RIP 0x7ff0e526fbe0.
[ 2268.548256] RSP: 002b:00007ffc229af690 EFLAGS: 00010246
[ 2268.548816] RAX: 0000000000000000 RBX: fffffffffffffe98 RCX: 00007ff0e526fc0a
[ 2268.549556] RDX: 00007ffc229af6d0 RSI: 0000000000000000 RDI: 0000000000000000
[ 2268.550314] RBP: 0000000000000004 R08: 0000000000000002 R09: 0000000000000001
[ 2268.551072] R10: 00007ffc229af6d0 R11: 0000000000000246 R12: 0000000000000000
[ 2268.551815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2268.552613] Mem-Info:
[ 2268.552890] active_anon:16916 inactive_anon:57030 isolated_anon:0
[ 2268.552890]  active_file:3 inactive_file:0 isolated_file:0
[ 2268.552890]  unevictable:0 dirty:0 writeback:0
[ 2268.552890]  slab_reclaimable:8278 slab_unreclaimable:252777
[ 2268.552890]  mapped:69634 shmem:110 pagetables:1157 bounce:0
[ 2268.552890]  free:2766 free_pcp:264 free_cma:0
[ 2268.556165] Node 0 active_anon:67664kB inactive_anon:228120kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:440kB writeback_tmp:0kB kernel_stack:3648kB all_unreclaimable? yes
[ 2268.558570] Node 0 DMA free:6512kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2268.561277] lowmem_reserve[]: 0 1616 1616 1616
[ 2268.561799] Node 0 DMA32 free:4552kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:67664kB inactive_anon:228120kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:4628kB bounce:0kB free_pcp:1064kB local_pcp:576kB free_cma:0kB
[ 2268.564768] lowmem_reserve[]: 0 0 0 0
[ 2268.565187] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6512kB
[ 2268.566621] Node 0 DMA32: 634*4kB (UME) 100*8kB (ME) 29*16kB (M) 19*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4472kB
[ 2268.568114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2268.569025] 113 total pagecache pages
[ 2268.569444] 0 pages in swap cache
[ 2268.569817] Swap cache stats: add 0, delete 0, find 0/0
[ 2268.570396] Free swap  = 0kB
[ 2268.570713] Total swap = 0kB
[ 2268.571036] 524158 pages RAM
[ 2268.571368] 0 pages HighMem/MovableOnly
[ 2268.571784] 105056 pages reserved
[ 2268.572145] Unreclaimable slab info:
[ 2268.572555] Name                      Used          Total
[ 2268.573133] pid_3                      7KB          7KB
[ 2268.573717] pid_2                     41KB         56KB
[ 2268.574289] IEEE-802.15.4-MAC         63KB         63KB
[ 2268.574849] IEEE-802.15.4-RAW         31KB         31KB
[ 2268.575422] p9_req_t                   8KB          8KB
[ 2268.575984] ip6-frags                 15KB         15KB
[ 2268.576564] fib6_nodes                28KB         28KB
[ 2268.577121] ip6_dst_cache             41KB         41KB
[ 2268.577695] PINGv6                    63KB         63KB
[ 2268.578267] RAWv6                    283KB        283KB
[ 2268.578818] UDPLITEv6                 62KB         62KB
[ 2268.579399] UDPv6                     62KB         62KB
[ 2268.579963] TCPv6                     62KB         62KB
[ 2268.580538] scsi_sense_cache           8KB          8KB
[ 2268.581093] sd_ext_cdb                 3KB          3KB
[ 2268.581682] virtio_scsi_cmd           16KB         16KB
[ 2268.582257] sgpool-128                59KB         59KB
[ 2268.582810] sgpool-64                 63KB         63KB
[ 2268.583384] sgpool-32                 47KB         47KB
[ 2268.583938] sgpool-16                 30KB         30KB
[ 2268.584509] sgpool-8                  63KB         63KB
[ 2268.585077] io_kiocb                 352KB        431KB
[ 2268.585663] mqueue_inode_cache         62KB         62KB
[ 2268.586232] nfs_commit_data           15KB         15KB
[ 2268.586805] nfs_write_data            47KB         47KB
[ 2268.587429] jbd2_inode                11KB         11KB
[ 2268.588099] ext4_system_zone           3KB          3KB
[ 2268.588677] ext4_io_end_vec            7KB          7KB
[ 2268.589231] ext4_bio_post_read_ctx         15KB         15KB
[ 2268.589869] kioctx                    31KB         31KB
[ 2268.590440] aio_kiocb                  7KB          7KB
[ 2268.590999] bio-2                      4KB          4KB
[ 2268.591569] fasync_cache               7KB          7KB
[ 2268.592127] pid_namespace              7KB          7KB
[ 2268.592698] rpc_buffers               31KB         31KB
[ 2268.593265] rpc_tasks                  3KB          3KB
[ 2268.593830] UNIX                     222KB        320KB
[ 2268.594402] UDP-Lite                  31KB         31KB
[ 2268.594959] tcp_bind_bucket            8KB          8KB
[ 2268.595543] ip_fib_trie                8KB          8KB
[ 2268.596104] ip_fib_alias              19KB         19KB
[ 2268.596679] ip_dst_cache              32KB         32KB
[ 2268.597232] PING                      62KB         62KB
[ 2268.597818] RAW                       93KB         93KB
[ 2268.598390] UDP                      283KB        283KB
[ 2268.598944] request_sock_TCP           7KB          7KB
[ 2268.599512] TCP                       60KB         60KB
[ 2268.600067] hugetlbfs_inode_cache         30KB         30KB
[ 2268.600681] bio-1                     11KB         11KB
[ 2268.601232] eventpoll_pwq             23KB         23KB
[ 2268.601805] eventpoll_epi             39KB         39KB
[ 2268.602378] inotify_inode_mark         58KB         58KB
[ 2268.602944] request_queue             60KB         60KB
[ 2268.603517] blkdev_ioc                18KB         18KB
[ 2268.604073] bio-0                     52KB         52KB
[ 2268.604650] biovec-max               714KB        714KB
[ 2268.605206] biovec-128                31KB         31KB
[ 2268.605787] biovec-64                189KB        189KB
[ 2268.606362] biovec-16                 30KB         30KB
[ 2268.606913] user_namespace            31KB         31KB
[ 2268.607488] uid_cache                  8KB          8KB
[ 2268.608056] dmaengine-unmap-2          4KB          4KB
[ 2268.608625] audit_buffer               7KB          7KB
[ 2268.609179] skbuff_fclone_cache         82KB         82KB
[ 2268.609767] skbuff_head_cache       1773KB       1773KB
[ 2268.610343] configfs_dir_cache          4KB          4KB
[ 2268.610905] file_lock_cache           66KB         66KB
[ 2268.612185] file_lock_ctx              7KB          7KB
[ 2268.612843] fsnotify_mark_connector         20KB         20KB
[ 2268.613482] net_namespace            143KB        143KB
[ 2268.614053] task_delay_info          135KB        135KB
[ 2268.614627] taskstats                 46KB         46KB
[ 2268.615186] proc_dir_entry           495KB        495KB
[ 2268.615765] pde_opener                31KB         31KB
[ 2268.616344] seq_file                  41KB         45KB
[ 2268.616914] sigqueue                  74KB         74KB
[ 2268.617484] shmem_inode_cache       1186KB       1257KB
[ 2268.618059] kernfs_iattrs_cache        212KB        212KB
[ 2268.618657] kernfs_node_cache       5350KB       5380KB
[ 2268.619215] mnt_cache                181KB        181KB
[ 2268.619829] filp                     942KB       1657KB
[ 2268.620408] names_cache             5087KB       5295KB
[ 2268.620961] hashtab_node             278KB        278KB
[ 2268.621539] ebitmap_node            1149KB       1149KB
[ 2268.622104] avtab_node              4976KB       4976KB
[ 2268.622690] avc_node                  31KB         31KB
[ 2268.623272] lsm_inode_cache         3166KB       3257KB
[ 2268.623832] lsm_file_cache            61KB        164KB
[ 2268.624406] key_jar                   31KB         31KB
[ 2268.624968] uts_namespace             15KB         15KB
[ 2268.625550] nsproxy                   19KB         19KB
[ 2268.626166] vm_area_struct           783KB       1052KB
[ 2268.626750] fs_cache                  64KB         64KB
[ 2268.627328] files_cache              255KB        255KB
[ 2268.627888] signal_cache             258KB        401KB
[ 2268.628468] sighand_cache            275KB        330KB
[ 2268.629038] task_struct             1004KB       1312KB
[ 2268.629638] cred_jar                  74KB        176KB
[ 2268.630211] anon_vma_chain           199KB        255KB
[ 2268.630792] anon_vma                 235KB        255KB
[ 2268.631385] pid                       81KB        101KB
[ 2268.631945] Acpi-Operand             231KB        269KB
[ 2268.632530] Acpi-ParseExt             23KB         23KB
[ 2268.633094] Acpi-Parse               150KB        166KB
[ 2268.633680] Acpi-State               216KB        232KB
[ 2268.634262] Acpi-Namespace            24KB         24KB
[ 2268.634821] numa_policy                3KB          3KB
[ 2268.635401] trace_event_file         163KB        163KB
[ 2268.635974] ftrace_event_field        280KB        280KB
[ 2268.636569] pool_workqueue            32KB         32KB
[ 2268.637126] task_group                16KB         16KB
[ 2268.637723] mm_struct                260KB        315KB
[ 2268.638301] vmap_area                535KB        535KB
[ 2268.638858] page->ptl                214KB        248KB
[ 2268.639438] kmemleak_scan_area        270KB        270KB
[ 2268.640005] kmemleak_object       775899KB     775899KB
[ 2268.640589] kmalloc-8k              4864KB       4960KB
[ 2268.641161] kmalloc-4k              6760KB       8000KB
[ 2268.641753] kmalloc-2k              4492KB       4960KB
[ 2268.642351] kmalloc-1k              2238KB       3008KB
[ 2268.642914] kmalloc-512            30384KB      30384KB
[ 2268.643488] kmalloc-256             1316KB       1336KB
[ 2268.644046] kmalloc-192              486KB        492KB
[ 2268.644659] kmalloc-128              710KB       1276KB
[ 2268.645285] kmalloc-96               806KB       1504KB
[ 2268.645876] kmalloc-64              1475KB       1480KB
[ 2268.646455] kmalloc-32             92800KB      92800KB
[ 2268.647020] kmalloc-16               372KB        372KB
[ 2268.647597] kmalloc-8                285KB        326KB
[ 2268.648156] kmem_cache_node           47KB         47KB
[ 2268.648736] kmem_cache                78KB         78KB
[ 2268.649309] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/cron.service,task=cron,pid=169,uid=0
[ 2268.650918] Out of memory (oom_kill_allocating_task): Killed process 169 (cron) total-vm:5576kB, anon-rss:216kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:44kB oom_score_adj:0
[ 2269.277196] syz-executor.3 (289) used greatest stack depth: 23688 bytes left
[ 2270.084272] oom_reaper: reaped process 11192 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 2275.034104] systemd-rfkill (11266) used greatest stack depth: 23440 bytes left

VM DIAGNOSIS:
11:24:02  Registers:
info registers vcpu 0
RAX=ffff888016efcec0 RBX=ffff88806ce09ae0 RCX=ffff88806ce09ae0 RDX=0000000000000060
RSI=0000000000000000 RDI=ffff88806ce09a58 RBP=ffff888016efcec0 RSP=ffff88806ce099f8
R8 =00000000000001b0 R9 =ffffed10011dfabe R10=fffffbfff0d0c2dc R11=0000000000000001
R12=0000000000000000 R13=ffff88806ce09a80 R14=ffff888016efcec0 R15=ffff88806ce09a58
RIP=ffffffff816c1cf2 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd43a83d750 CR3=0000000008f32000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65
XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369
XMM04=206f742073736170206f7420736e6f69 XMM05=6e692f6374652f20230a6d6f72662068
XMM06=7320736920656c69662073696854202e XMM07=00000000000000000000000000000000
XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffffffff812fedf0 RCX=1ffff1100406ee01 RDX=1ffff1100406eeff
RSI=ffffffff81edd111 RDI=ffff888020377868 RBP=ffff888020377838 RSP=ffff8880203777a0
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032042 R11=1ffff1100406eee3
R12=ffff888020377868 R13=0000000000000000 R14=ffff8880466fb480 R15=ffff88800f63fe40
RIP=ffffffff812fedfb RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f295fe58700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563e70276b60 CR3=00000000488fc000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0ea4683447c09e778fe0b9d8755f04ad
XMM02=5c3f5f57972676ea2060d18bd0cbdd8a XMM03=48d0e23b1f6fc54769835ac58f9798ab
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000