syzkaller login: [  254.791648][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
[  254.822294][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
[  254.866119][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
[  254.930037][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
[  255.028617][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
Warning: Permanently added '[localhost]:26485' (ECDSA) to the list of known hosts.
1970/01/01 00:05:10 fuzzer started
1970/01/01 00:05:22 dialing manager at localhost:37991
1970/01/01 00:05:25 syscalls: 2768
1970/01/01 00:05:25 code coverage: enabled
1970/01/01 00:05:25 comparison tracing: enabled
1970/01/01 00:05:25 extra coverage: enabled
1970/01/01 00:05:25 setuid sandbox: enabled
1970/01/01 00:05:25 namespace sandbox: enabled
1970/01/01 00:05:25 Android sandbox: /sys/fs/selinux/policy does not exist
1970/01/01 00:05:26 fault injection: enabled
1970/01/01 00:05:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
1970/01/01 00:05:26 net packet injection: enabled
1970/01/01 00:05:26 net device setup: enabled
1970/01/01 00:05:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
1970/01/01 00:05:26 devlink PCI setup: PCI device 0000:00:10.0 is not available
1970/01/01 00:05:26 USB emulation: enabled
1970/01/01 00:05:26 hci packet injection: /dev/vhci does not exist
1970/01/01 00:05:26 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist
1970/01/01 00:05:26 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist
1970/01/01 00:05:30 fetching corpus: 50, signal 26602/28476 (executing program)
1970/01/01 00:05:32 fetching corpus: 100, signal 42586/46150 (executing program)
1970/01/01 00:05:35 fetching corpus: 150, signal 54201/59375 (executing program)
1970/01/01 00:05:37 fetching corpus: 200, signal 66035/72704 (executing program)
1970/01/01 00:05:40 fetching corpus: 250, signal 73703/81835 (executing program)
1970/01/01 00:05:42 fetching corpus: 300, signal 84326/93764 (executing program)
1970/01/01 00:05:45 fetching corpus: 350, signal 89433/100231 (executing program)
1970/01/01 00:05:46 fetching corpus: 400, signal 93183/105352 (executing program)
1970/01/01 00:05:50 fetching corpus: 450, signal 98918/112338 (executing program)
1970/01/01 00:05:52 fetching corpus: 500, signal 103287/117962 (executing program)
1970/01/01 00:05:53 fetching corpus: 550, signal 106434/122395 (executing program)
1970/01/01 00:05:57 fetching corpus: 600, signal 109989/127226 (executing program)
1970/01/01 00:06:00 fetching corpus: 650, signal 114080/132475 (executing program)
1970/01/01 00:06:01 fetching corpus: 700, signal 115955/135606 (executing program)
1970/01/01 00:06:03 fetching corpus: 750, signal 118765/139597 (executing program)
1970/01/01 00:06:05 fetching corpus: 800, signal 121393/143441 (executing program)
1970/01/01 00:06:07 fetching corpus: 850, signal 124552/147705 (executing program)
1970/01/01 00:06:09 fetching corpus: 900, signal 129263/153364 (executing program)
1970/01/01 00:06:11 fetching corpus: 950, signal 131117/156385 (executing program)
1970/01/01 00:06:13 fetching corpus: 1000, signal 133576/159908 (executing program)
1970/01/01 00:06:15 fetching corpus: 1050, signal 136453/163782 (executing program)
1970/01/01 00:06:17 fetching corpus: 1100, signal 139474/167774 (executing program)
1970/01/01 00:06:19 fetching corpus: 1150, signal 141268/170657 (executing program)
1970/01/01 00:06:20 fetching corpus: 1200, signal 143711/174060 (executing program)
1970/01/01 00:06:22 fetching corpus: 1250, signal 147014/178192 (executing program)
1970/01/01 00:06:24 fetching corpus: 1300, signal 149434/181543 (executing program)
1970/01/01 00:06:26 fetching corpus: 1350, signal 150949/184120 (executing program)
1970/01/01 00:06:28 fetching corpus: 1400, signal 152265/186454 (executing program)
1970/01/01 00:06:29 fetching corpus: 1450, signal 155434/190433 (executing program)
1970/01/01 00:06:32 fetching corpus: 1500, signal 157082/193093 (executing program)
1970/01/01 00:06:33 fetching corpus: 1550, signal 158258/195259 (executing program)
1970/01/01 00:06:35 fetching corpus: 1600, signal 162665/200095 (executing program)
1970/01/01 00:06:37 fetching corpus: 1650, signal 164835/203062 (executing program)
1970/01/01 00:06:39 fetching corpus: 1700, signal 166675/205729 (executing program)
1970/01/01 00:06:40 fetching corpus: 1750, signal 168746/208613 (executing program)
1970/01/01 00:06:43 fetching corpus: 1800, signal 170744/211397 (executing program)
1970/01/01 00:06:47 fetching corpus: 1850, signal 172394/213845 (executing program)
1970/01/01 00:06:49 fetching corpus: 1900, signal 173436/215869 (executing program)
1970/01/01 00:06:51 fetching corpus: 1950, signal 176294/219328 (executing program)
1970/01/01 00:06:54 fetching corpus: 2000, signal 178420/222137 (executing program)
1970/01/01 00:06:56 fetching corpus: 2050, signal 179534/224136 (executing program)
1970/01/01 00:06:58 fetching corpus: 2100, signal 181148/226479 (executing program)
1970/01/01 00:07:00 fetching corpus: 2150, signal 186655/231789 (executing program)
1970/01/01 00:07:03 fetching corpus: 2200, signal 188856/234551 (executing program)
1970/01/01 00:07:05 fetching corpus: 2250, signal 192916/238748 (executing program)
1970/01/01 00:07:07 fetching corpus: 2300, signal 195009/241328 (executing program)
1970/01/01 00:07:09 fetching corpus: 2350, signal 196280/243253 (executing program)
1970/01/01 00:07:11 fetching corpus: 2400, signal 197598/245247 (executing program)
1970/01/01 00:07:13 fetching corpus: 2450, signal 198486/246928 (executing program)
1970/01/01 00:07:16 fetching corpus: 2500, signal 200892/249734 (executing program)
1970/01/01 00:07:17 fetching corpus: 2550, signal 202456/251831 (executing program)
1970/01/01 00:07:19 fetching corpus: 2600, signal 203172/253324 (executing program)
1970/01/01 00:07:21 fetching corpus: 2650, signal 204362/255198 (executing program)
1970/01/01 00:07:23 fetching corpus: 2700, signal 205499/257019 (executing program)
1970/01/01 00:07:24 fetching corpus: 2750, signal 206540/258740 (executing program)
1970/01/01 00:07:26 fetching corpus: 2800, signal 207856/260647 (executing program)
1970/01/01 00:07:29 fetching corpus: 2850, signal 209853/263045 (executing program)
1970/01/01 00:07:31 fetching corpus: 2900, signal 212577/265922 (executing program)
1970/01/01 00:07:34 fetching corpus: 2950, signal 213403/267430 (executing program)
1970/01/01 00:07:36 fetching corpus: 3000, signal 214361/269004 (executing program)
1970/01/01 00:07:38 fetching corpus: 3050, signal 215532/270743 (executing program)
1970/01/01 00:07:40 fetching corpus: 3100, signal 216762/272462 (executing program)
1970/01/01 00:07:42 fetching corpus: 3150, signal 217396/273803 (executing program)
1970/01/01 00:07:45 fetching corpus: 3200, signal 219205/275883 (executing program)
1970/01/01 00:07:47 fetching corpus: 3250, signal 220445/277599 (executing program)
1970/01/01 00:07:49 fetching corpus: 3300, signal 221531/279177 (executing program)
1970/01/01 00:07:51 fetching corpus: 3350, signal 222274/280540 (executing program)
1970/01/01 00:07:53 fetching corpus: 3400, signal 223297/282067 (executing program)
1970/01/01 00:07:56 fetching corpus: 3450, signal 224702/283865 (executing program)
1970/01/01 00:07:57 fetching corpus: 3500, signal 225915/285509 (executing program)
1970/01/01 00:07:59 fetching corpus: 3550, signal 227139/287137 (executing program)
1970/01/01 00:08:01 fetching corpus: 3600, signal 227947/288484 (executing program)
1970/01/01 00:08:03 fetching corpus: 3650, signal 228746/289839 (executing program)
1970/01/01 00:08:06 fetching corpus: 3700, signal 229860/291376 (executing program)
1970/01/01 00:08:08 fetching corpus: 3750, signal 230690/292687 (executing program)
1970/01/01 00:08:09 fetching corpus: 3800, signal 231731/294178 (executing program)
1970/01/01 00:08:11 fetching corpus: 3850, signal 232759/295612 (executing program)
1970/01/01 00:08:13 fetching corpus: 3900, signal 233854/297084 (executing program)
1970/01/01 00:08:15 fetching corpus: 3950, signal 234615/298351 (executing program)
1970/01/01 00:08:17 fetching corpus: 4000, signal 235404/299631 (executing program)
1970/01/01 00:08:19 fetching corpus: 4050, signal 236102/300828 (executing program)
1970/01/01 00:08:20 fetching corpus: 4100, signal 237213/302284 (executing program)
1970/01/01 00:08:23 fetching corpus: 4150, signal 238645/303898 (executing program)
1970/01/01 00:08:25 fetching corpus: 4200, signal 239322/305055 (executing program)
1970/01/01 00:08:26 fetching corpus: 4250, signal 240314/306376 (executing program)
1970/01/01 00:08:28 fetching corpus: 4300, signal 241003/307559 (executing program)
1970/01/01 00:08:29 fetching corpus: 4350, signal 241574/308630 (executing program)
1970/01/01 00:08:31 fetching corpus: 4400, signal 242030/309659 (executing program)
1970/01/01 00:08:33 fetching corpus: 4450, signal 242634/310733 (executing program)
1970/01/01 00:08:36 fetching corpus: 4500, signal 243873/312244 (executing program)
1970/01/01 00:08:38 fetching corpus: 4550, signal 244784/313445 (executing program)
1970/01/01 00:08:40 fetching corpus: 4600, signal 245332/314479 (executing program)
1970/01/01 00:08:42 fetching corpus: 4650, signal 246379/315797 (executing program)
1970/01/01 00:08:43 fetching corpus: 4700, signal 247075/316909 (executing program)
1970/01/01 00:08:46 fetching corpus: 4750, signal 247802/318090 (executing program)
1970/01/01 00:08:47 fetching corpus: 4800, signal 248363/319118 (executing program)
1970/01/01 00:08:49 fetching corpus: 4850, signal 249211/320306 (executing program)
1970/01/01 00:08:51 fetching corpus: 4900, signal 250097/321425 (executing program)
1970/01/01 00:08:54 fetching corpus: 4950, signal 250795/322470 (executing program)
1970/01/01 00:08:56 fetching corpus: 5000, signal 251550/323511 (executing program)
1970/01/01 00:08:58 fetching corpus: 5050, signal 252054/324438 (executing program)
1970/01/01 00:09:00 fetching corpus: 5100, signal 252622/325417 (executing program)
1970/01/01 00:09:01 fetching corpus: 5150, signal 253341/326470 (executing program)
1970/01/01 00:09:03 fetching corpus: 5200, signal 253954/327474 (executing program)
1970/01/01 00:09:05 fetching corpus: 5250, signal 254430/328403 (executing program)
1970/01/01 00:09:07 fetching corpus: 5300, signal 255086/329428 (executing program)
1970/01/01 00:09:09 fetching corpus: 5350, signal 257063/331016 (executing program)
1970/01/01 00:09:11 fetching corpus: 5400, signal 257540/331963 (executing program)
1970/01/01 00:09:12 fetching corpus: 5450, signal 257973/332859 (executing program)
1970/01/01 00:09:15 fetching corpus: 5500, signal 258626/333819 (executing program)
1970/01/01 00:09:16 fetching corpus: 5550, signal 259068/334676 (executing program)
1970/01/01 00:09:18 fetching corpus: 5600, signal 259828/335726 (executing program)
1970/01/01 00:09:20 fetching corpus: 5650, signal 260306/336650 (executing program)
1970/01/01 00:09:22 fetching corpus: 5700, signal 261087/337617 (executing program)
1970/01/01 00:09:23 fetching corpus: 5750, signal 261936/338662 (executing program)
1970/01/01 00:09:26 fetching corpus: 5800, signal 262662/339627 (executing program)
1970/01/01 00:09:28 fetching corpus: 5850, signal 263330/340560 (executing program)
1970/01/01 00:09:30 fetching corpus: 5900, signal 263967/341464 (executing program)
1970/01/01 00:09:31 fetching corpus: 5950, signal 264575/342347 (executing program)
1970/01/01 00:09:33 fetching corpus: 6000, signal 265204/343262 (executing program)
1970/01/01 00:09:34 fetching corpus: 6050, signal 265667/344088 (executing program)
1970/01/01 00:09:37 fetching corpus: 6100, signal 267574/345424 (executing program)
1970/01/01 00:09:40 fetching corpus: 6150, signal 268211/346241 (executing program)
1970/01/01 00:09:42 fetching corpus: 6200, signal 269273/347316 (executing program)
1970/01/01 00:09:44 fetching corpus: 6250, signal 270351/348326 (executing program)
1970/01/01 00:09:46 fetching corpus: 6300, signal 270801/349098 (executing program)
1970/01/01 00:09:48 fetching corpus: 6350, signal 271385/349920 (executing program)
1970/01/01 00:09:51 fetching corpus: 6400, signal 272031/350750 (executing program)
1970/01/01 00:09:54 fetching corpus: 6450, signal 272395/351521 (executing program)
1970/01/01 00:09:56 fetching corpus: 6500, signal 272816/352271 (executing program)
1970/01/01 00:09:58 fetching corpus: 6550, signal 273465/353071 (executing program)
1970/01/01 00:10:00 fetching corpus: 6600, signal 273890/353791 (executing program)
1970/01/01 00:10:02 fetching corpus: 6650, signal 274601/354617 (executing program)
1970/01/01 00:10:04 fetching corpus: 6700, signal 274961/355324 (executing program)
1970/01/01 00:10:07 fetching corpus: 6750, signal 275674/356130 (executing program)
1970/01/01 00:10:09 fetching corpus: 6800, signal 276050/356882 (executing program)
1970/01/01 00:10:11 fetching corpus: 6850, signal 276603/357671 (executing program)
1970/01/01 00:10:12 fetching corpus: 6900, signal 277022/358378 (executing program)
1970/01/01 00:10:14 fetching corpus: 6950, signal 278206/359287 (executing program)
1970/01/01 00:10:16 fetching corpus: 7000, signal 278894/360074 (executing program)
1970/01/01 00:10:18 fetching corpus: 7050, signal 279602/360881 (executing program)
1970/01/01 00:10:21 fetching corpus: 7100, signal 280163/361638 (executing program)
1970/01/01 00:10:22 fetching corpus: 7150, signal 280691/362345 (executing program)
1970/01/01 00:10:25 fetching corpus: 7200, signal 281009/363010 (executing program)
1970/01/01 00:10:26 fetching corpus: 7250, signal 281365/363665 (executing program)
1970/01/01 00:10:28 fetching corpus: 7300, signal 281826/364319 (executing program)
1970/01/01 00:10:29 fetching corpus: 7350, signal 282527/365101 (executing program)
1970/01/01 00:10:31 fetching corpus: 7400, signal 283402/365891 (executing program)
1970/01/01 00:10:34 fetching corpus: 7450, signal 284564/366718 (executing program)
1970/01/01 00:10:36 fetching corpus: 7500, signal 285226/367440 (executing program)
1970/01/01 00:10:37 fetching corpus: 7550, signal 285756/368205 (executing program)
1970/01/01 00:10:40 fetching corpus: 7600, signal 286593/368965 (executing program)
1970/01/01 00:10:42 fetching corpus: 7650, signal 286956/369565 (executing program)
1970/01/01 00:10:45 fetching corpus: 7700, signal 287806/370271 (executing program)
1970/01/01 00:10:47 fetching corpus: 7750, signal 288246/370923 (executing program)
1970/01/01 00:10:49 fetching corpus: 7800, signal 288630/371514 (executing program)
1970/01/01 00:10:50 fetching corpus: 7850, signal 289232/372194 (executing program)
1970/01/01 00:10:52 fetching corpus: 7900, signal 290037/372872 (executing program)
1970/01/01 00:10:54 fetching corpus: 7950, signal 290374/373438 (executing program)
1970/01/01 00:10:56 fetching corpus: 8000, signal 291048/374086 (executing program)
1970/01/01 00:10:57 fetching corpus: 8050, signal 291896/374820 (executing program)
1970/01/01 00:10:59 fetching corpus: 8100, signal 292400/375432 (executing program)
1970/01/01 00:11:00 fetching corpus: 8150, signal 292833/376007 (executing program)
1970/01/01 00:11:03 fetching corpus: 8200, signal 293526/376622 (executing program)
1970/01/01 00:11:06 fetching corpus: 8250, signal 294286/377247 (executing program)
1970/01/01 00:11:08 fetching corpus: 8300, signal 294726/377809 (executing program)
1970/01/01 00:11:10 fetching corpus: 8350, signal 295360/378418 (executing program)
1970/01/01 00:11:12 fetching corpus: 8400, signal 295773/378944 (executing program)
1970/01/01 00:11:13 fetching corpus: 8450, signal 296137/379477 (executing program)
1970/01/01 00:11:15 fetching corpus: 8500, signal 296550/380066 (executing program)
1970/01/01 00:11:18 fetching corpus: 8550, signal 296945/380620 (executing program)
1970/01/01 00:11:20 fetching corpus: 8600, signal 297582/381197 (executing program)
1970/01/01 00:11:22 fetching corpus: 8650, signal 298092/381741 (executing program)
1970/01/01 00:11:23 fetching corpus: 8700, signal 298532/382270 (executing program)
1970/01/01 00:11:25 fetching corpus: 8750, signal 299953/382933 (executing program)
1970/01/01 00:11:26 fetching corpus: 8800, signal 300360/383472 (executing program)
1970/01/01 00:11:28 fetching corpus: 8850, signal 301258/384046 (executing program)
1970/01/01 00:11:30 fetching corpus: 8900, signal 301772/384584 (executing program)
1970/01/01 00:11:33 fetching corpus: 8950, signal 302403/385096 (executing program)
1970/01/01 00:11:35 fetching corpus: 9000, signal 303237/385581 (executing program)
1970/01/01 00:11:37 fetching corpus: 9050, signal 303626/386080 (executing program)
1970/01/01 00:11:38 fetching corpus: 9100, signal 303928/386577 (executing program)
1970/01/01 00:11:39 fetching corpus: 9150, signal 304574/387099 (executing program)
1970/01/01 00:11:41 fetching corpus: 9200, signal 304861/387598 (executing program)
1970/01/01 00:11:43 fetching corpus: 9250, signal 305369/388081 (executing program)
1970/01/01 00:11:46 fetching corpus: 9300, signal 305715/388549 (executing program)
1970/01/01 00:11:47 fetching corpus: 9350, signal 306185/388974 (executing program)
1970/01/01 00:11:49 fetching corpus: 9400, signal 306565/389441 (executing program)
1970/01/01 00:11:51 fetching corpus: 9450, signal 307068/389892 (executing program)
1970/01/01 00:11:53 fetching corpus: 9500, signal 307490/390346 (executing program)
1970/01/01 00:11:55 fetching corpus: 9550, signal 307974/390764 (executing program)
1970/01/01 00:11:58 fetching corpus: 9600, signal 308345/391213 (executing program)
1970/01/01 00:12:00 fetching corpus: 9650, signal 308598/391635 (executing program)
1970/01/01 00:12:02 fetching corpus: 9700, signal 308866/392097 (executing program)
1970/01/01 00:12:04 fetching corpus: 9750, signal 309337/392510 (executing program)
1970/01/01 00:12:06 fetching corpus: 9800, signal 310332/392928 (executing program)
1970/01/01 00:12:08 fetching corpus: 9850, signal 310705/393170 (executing program)
1970/01/01 00:12:10 fetching corpus: 9900, signal 311012/393179 (executing program)
1970/01/01 00:12:11 fetching corpus: 9950, signal 311320/393179 (executing program)
1970/01/01 00:12:12 fetching corpus: 10000, signal 311825/393179 (executing program)
1970/01/01 00:12:14 fetching corpus: 10050, signal 312524/393179 (executing program)
1970/01/01 00:12:16 fetching corpus: 10100, signal 313209/393179 (executing program)
1970/01/01 00:12:19 fetching corpus: 10150, signal 313722/393191 (executing program)
1970/01/01 00:12:21 fetching corpus: 10200, signal 314362/393191 (executing program)
1970/01/01 00:12:22 fetching corpus: 10250, signal 314916/393191 (executing program)
1970/01/01 00:12:24 fetching corpus: 10300, signal 315292/393191 (executing program)
1970/01/01 00:12:26 fetching corpus: 10350, signal 315600/393191 (executing program)
1970/01/01 00:12:28 fetching corpus: 10400, signal 316187/393193 (executing program)
1970/01/01 00:12:29 fetching corpus: 10450, signal 316629/393193 (executing program)
1970/01/01 00:12:31 fetching corpus: 10500, signal 316886/393193 (executing program)
1970/01/01 00:12:32 fetching corpus: 10550, signal 317257/393193 (executing program)
1970/01/01 00:12:34 fetching corpus: 10600, signal 317645/393193 (executing program)
1970/01/01 00:12:37 fetching corpus: 10650, signal 318350/393193 (executing program)
1970/01/01 00:12:38 fetching corpus: 10700, signal 318752/393193 (executing program)
1970/01/01 00:12:40 fetching corpus: 10750, signal 319316/393193 (executing program)
1970/01/01 00:12:42 fetching corpus: 10800, signal 319801/393193 (executing program)
1970/01/01 00:12:44 fetching corpus: 10850, signal 320196/393193 (executing program)
1970/01/01 00:12:45 fetching corpus: 10900, signal 320669/393196 (executing program)
1970/01/01 00:12:47 fetching corpus: 10950, signal 321141/393196 (executing program)
1970/01/01 00:12:48 fetching corpus: 11000, signal 321531/393196 (executing program)
1970/01/01 00:12:52 fetching corpus: 11050, signal 322118/393196 (executing program)
1970/01/01 00:12:54 fetching corpus: 11100, signal 322426/393196 (executing program)
1970/01/01 00:12:56 fetching corpus: 11150, signal 322720/393196 (executing program)
1970/01/01 00:12:58 fetching corpus: 11200, signal 323087/393196 (executing program)
1970/01/01 00:12:59 fetching corpus: 11250, signal 323523/393196 (executing program)
1970/01/01 00:13:01 fetching corpus: 11300, signal 323707/393196 (executing program)
1970/01/01 00:13:03 fetching corpus: 11350, signal 324022/393197 (executing program)
1970/01/01 00:13:05 fetching corpus: 11400, signal 324300/393200 (executing program)
1970/01/01 00:13:07 fetching corpus: 11450, signal 324657/393200 (executing program)
1970/01/01 00:13:11 fetching corpus: 11500, signal 325129/393200 (executing program)
1970/01/01 00:13:13 fetching corpus: 11550, signal 325397/393208 (executing program)
1970/01/01 00:13:15 fetching corpus: 11600, signal 325817/393208 (executing program)
1970/01/01 00:13:17 fetching corpus: 11650, signal 326228/393208 (executing program)
1970/01/01 00:13:19 fetching corpus: 11700, signal 326520/393208 (executing program)
1970/01/01 00:13:21 fetching corpus: 11750, signal 326815/393208 (executing program)
1970/01/01 00:13:23 fetching corpus: 11800, signal 327156/393210 (executing program)
1970/01/01 00:13:24 fetching corpus: 11850, signal 327408/393210 (executing program)
1970/01/01 00:13:27 fetching corpus: 11900, signal 328661/393210 (executing program)
1970/01/01 00:13:29 fetching corpus: 11950, signal 329373/393210 (executing program)
1970/01/01 00:13:31 fetching corpus: 12000, signal 329995/393213 (executing program)
1970/01/01 00:13:34 fetching corpus: 12050, signal 330353/393215 (executing program)
1970/01/01 00:13:35 fetching corpus: 12100, signal 330750/393215 (executing program)
1970/01/01 00:13:37 fetching corpus: 12150, signal 331307/393215 (executing program)
1970/01/01 00:13:39 fetching corpus: 12200, signal 331823/393217 (executing program)
1970/01/01 00:13:41 fetching corpus: 12250, signal 332088/393217 (executing program)
1970/01/01 00:13:43 fetching corpus: 12300, signal 332480/393217 (executing program)
1970/01/01 00:13:44 fetching corpus: 12350, signal 332692/393217 (executing program)
1970/01/01 00:13:47 fetching corpus: 12400, signal 332967/393217 (executing program)
1970/01/01 00:13:50 fetching corpus: 12450, signal 333264/393235 (executing program)
1970/01/01 00:13:52 fetching corpus: 12500, signal 333538/393239 (executing program)
1970/01/01 00:13:53 fetching corpus: 12550, signal 334123/393239 (executing program)
1970/01/01 00:13:55 fetching corpus: 12600, signal 334508/393239 (executing program)
1970/01/01 00:13:57 fetching corpus: 12650, signal 335360/393239 (executing program)
1970/01/01 00:13:58 fetching corpus: 12700, signal 335640/393243 (executing program)
1970/01/01 00:14:00 fetching corpus: 12750, signal 335920/393243 (executing program)
1970/01/01 00:14:02 fetching corpus: 12800, signal 336236/393243 (executing program)
1970/01/01 00:14:03 fetching corpus: 12850, signal 336608/393243 (executing program)
1970/01/01 00:14:05 fetching corpus: 12900, signal 336906/393243 (executing program)
1970/01/01 00:14:07 fetching corpus: 12950, signal 337172/393243 (executing program)
1970/01/01 00:14:10 fetching corpus: 13000, signal 337481/393243 (executing program)
1970/01/01 00:14:11 fetching corpus: 13050, signal 337826/393243 (executing program)
1970/01/01 00:14:13 fetching corpus: 13100, signal 338414/393243 (executing program)
1970/01/01 00:14:15 fetching corpus: 13150, signal 338677/393244 (executing program)
1970/01/01 00:14:17 fetching corpus: 13200, signal 339066/393248 (executing program)
1970/01/01 00:14:19 fetching corpus: 13250, signal 339736/393248 (executing program)
1970/01/01 00:14:20 fetching corpus: 13300, signal 339985/393248 (executing program)
1970/01/01 00:14:23 fetching corpus: 13350, signal 340399/393248 (executing program)
1970/01/01 00:14:26 fetching corpus: 13400, signal 340774/393248 (executing program)
1970/01/01 00:14:28 fetching corpus: 13440, signal 341201/393248 (executing program)
1970/01/01 00:14:28 fetching corpus: 13440, signal 341201/393248 (executing program)
1970/01/01 00:16:03 starting 2 fuzzer processes
00:16:21 executing program 0:
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1be7b93a}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x61d6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3f}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfffffffe}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x881}, 0x40010)
r0 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x401000)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x15, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x14)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='mountinfo\x00')
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x50}]}, 0x60}, 0x1, 0x0, 0x0, 0x44004}, 0x4000800)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r0}, 0x8)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000580))
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={&(0x7f00000005c0)="46552d75d091ada24be2bfd423792d3b33f192568fde0b317a9921f541630cbbffcde72bd705638ab0c3eae2cf34ae598f68fca6f71de33f0afb5de6bc1015c70311d43531d9f0e50c8b00509b0527bfd4", &(0x7f0000000640)=""/247, &(0x7f0000000740)="df851db37a77a95c285c20c1a68121599bdc9437d4d924066314ae0c02c2d6e1d75bd6d92cf9cd11cbe272fe8fd975", &(0x7f0000000780)="0bac9efe97dad7383538d34aea193a6c9dcd7c17018c803bae0ded5269d7d38594525fd7786d92aaadff7629bb08addf8fe9dabbc4dfd661cf13c9123a1cb31b488d6645229c14562e65cfd32a0d652e0e0a22d48d1d9770767bc656bc3810c7843c9fd6cf3631842bc9d4f529b72bca6c3220c52a2a6e8f29e92674cea41f6609d085b52cee48c73a0b0173ff16f8a88b0ff40e", 0x7, r0}, 0x38)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000880)=0x1, 0x4)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f00000008c0))
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000900)='syz2\x00', 0x0, r0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcsa\x00', 0x20201, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000980)=0x1, 0x4)
syncfs(r3)
accept4$packet(r0, &(0x7f00000011c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001200)=0x14, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000009c0), 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xe0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)
ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d12, &(0x7f00000013c0))
ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000001400))

00:16:45 executing program 1:
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x1, 0x401, 0x9, {0x0, 0x80000000}, 0x7ff, 0xfff00000})
r1 = eventfd2(0x8000, 0x80800)
r2 = fsmount(r0, 0x0, 0x71)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x2000})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x8, 0x2, 0x606e, 0x84a, r2, 0x2, [], 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x40)
r4 = fcntl$dupfd(r1, 0x406, r3)
read$eventfd(r0, &(0x7f0000000140), 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1e, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@generic={0x3, 0xd, 0xb, 0x7, 0xffff0000}, @generic={0x40, 0xe, 0x0, 0x9, 0x89e}]}, &(0x7f00000001c0)='GPL\x00', 0x900, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x10, [], 0x0, 0x8, r0, 0x8, &(0x7f0000001200)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x10, 0x8, 0x8}, 0x10, 0x0, r2}, 0x78)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f0000001300)=0x2)
read$fb(r2, &(0x7f0000001340), 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001380)={<r6=>r3, 0x8, 0xb4000000000000, 0x7fffffff})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000013c0)={0x579, 0x20, 0x200, 0x2, 0x10000, 0x5, 0xbde, 0x800, <r7=>0x0}, &(0x7f0000001400)=0x20)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000001440)=r7, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000014c0)={0x1, &(0x7f0000001480)=[{0xa7b3, 0x95, 0x2, 0xdd4f}]}, 0x10)
sendmsg$nl_netfilter(r4, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x10, 0x7, 0x101, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x7}, [@typed={0xc, 0x4f, 0x0, 0x0, @u64=0x800}]}, 0x20}}, 0x26044045)
socket$packet(0x11, 0x3, 0x300)
fdatasync(0xffffffffffffffff)

[ 1010.933635][ T3076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1011.134536][ T3076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1019.235939][ T3076] device hsr_slave_0 entered promiscuous mode
[ 1019.284857][ T3076] device hsr_slave_1 entered promiscuous mode
[ 1023.271481][ T3076] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1023.432264][ T3076] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1023.531367][ T3076] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1023.640050][ T3076] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1033.164245][ T3076] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1033.785439][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1033.874656][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1036.982730][ T3219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1037.139029][ T3219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1039.362286][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1039.436054][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1039.676878][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1039.700519][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1039.904261][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1040.120991][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1040.795265][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1040.840690][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1041.054515][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1041.132675][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1041.391281][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1042.953425][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1042.956716][ T3358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1046.660605][ T3219] device hsr_slave_0 entered promiscuous mode
[ 1046.683186][ T3219] device hsr_slave_1 entered promiscuous mode
[ 1046.723640][ T3219] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1046.751605][ T3219] Cannot create hsr debugfs directory
[ 1051.162984][ T3219] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1051.313233][ T3219] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1051.445260][ T3219] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1051.586443][ T3219] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1054.150141][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1054.224300][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1060.113992][ T3219] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1060.373590][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1060.416502][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1060.579888][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1060.631392][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1060.783508][ T3076] device veth0_vlan entered promiscuous mode
[ 1060.900575][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1060.936832][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1061.533699][ T3076] device veth1_vlan entered promiscuous mode
[ 1062.589659][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1062.645741][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1062.836254][ T3076] device veth0_macvtap entered promiscuous mode
[ 1063.176237][ T3076] device veth1_macvtap entered promiscuous mode
[ 1063.460849][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1063.482465][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1064.210278][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1064.281768][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1064.550788][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1064.616978][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1064.930140][ T3076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.934360][ T3076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.936143][ T3076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.965809][ T3076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.049061][ T3076] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[ 1068.616800][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1068.666683][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1068.929501][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1068.961975][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1069.133369][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1069.440949][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1070.595207][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1070.615873][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1070.664636][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1070.706607][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1070.920911][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1072.233610][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1072.236367][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
00:17:52 executing program 0:
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1be7b93a}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x61d6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3f}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfffffffe}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x881}, 0x40010)
r0 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x401000)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x15, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x14)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='mountinfo\x00')
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x50}]}, 0x60}, 0x1, 0x0, 0x0, 0x44004}, 0x4000800)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r0}, 0x8)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000580))
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={&(0x7f00000005c0)="46552d75d091ada24be2bfd423792d3b33f192568fde0b317a9921f541630cbbffcde72bd705638ab0c3eae2cf34ae598f68fca6f71de33f0afb5de6bc1015c70311d43531d9f0e50c8b00509b0527bfd4", &(0x7f0000000640)=""/247, &(0x7f0000000740)="df851db37a77a95c285c20c1a68121599bdc9437d4d924066314ae0c02c2d6e1d75bd6d92cf9cd11cbe272fe8fd975", &(0x7f0000000780)="0bac9efe97dad7383538d34aea193a6c9dcd7c17018c803bae0ded5269d7d38594525fd7786d92aaadff7629bb08addf8fe9dabbc4dfd661cf13c9123a1cb31b488d6645229c14562e65cfd32a0d652e0e0a22d48d1d9770767bc656bc3810c7843c9fd6cf3631842bc9d4f529b72bca6c3220c52a2a6e8f29e92674cea41f6609d085b52cee48c73a0b0173ff16f8a88b0ff40e", 0x7, r0}, 0x38)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000880)=0x1, 0x4)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f00000008c0))
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000900)='syz2\x00', 0x0, r0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcsa\x00', 0x20201, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000980)=0x1, 0x4)
syncfs(r3)
accept4$packet(r0, &(0x7f00000011c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001200)=0x14, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000009c0), 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xe0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)
ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d12, &(0x7f00000013c0))
ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000001400))

00:17:56 executing program 0:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400})

00:18:00 executing program 0:
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000140)={[{@nombcache='nombcache'}, {@stripe={'stripe', 0x3d, 0x15}}, {@nomblk_io_submit='nomblk_io_submit'}]})

[ 1084.525260][ T3532] loop0: detected capacity change from 0 to 1024
[ 1084.651940][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1084.741109][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1084.913036][ T3532] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[ 1085.653622][ T3532] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,stripe=0x0000000000000015,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[ 1096.453335][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1096.483752][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1096.596719][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1096.629232][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1096.758109][ T3219] device veth0_vlan entered promiscuous mode
[ 1097.573303][ T3219] device veth1_vlan entered promiscuous mode
[ 1099.226651][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1099.353878][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1099.646667][ T3219] device veth0_macvtap entered promiscuous mode
[ 1100.111622][ T3219] device veth1_macvtap entered promiscuous mode
[ 1101.250018][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1101.552763][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1101.603566][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1101.932332][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1102.014928][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1102.499218][ T3219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1102.501132][ T3219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1102.502729][ T3219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1102.504379][ T3219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
00:18:27 executing program 0:
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000140)={[{@nombcache='nombcache'}, {@stripe={'stripe', 0x3d, 0x15}}, {@nomblk_io_submit='nomblk_io_submit'}]})

00:18:28 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x185800, 0x17)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
add_key$fscrypt_provisioning(&(0x7f0000000100)='fscrypt-provisioning\x00', 0x0, &(0x7f0000000180)={0x1, 0x0, @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}, 0x48, 0xfffffffffffffffe)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
signalfd4(r1, &(0x7f0000000080)={[0x7]}, 0x8, 0x800)
openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x24140, 0x0)

[ 1110.936323][ T3549] loop0: detected capacity change from 0 to 1024
[ 1111.360197][ T3549] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[ 1111.814885][ T3549] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,stripe=0x0000000000000015,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[ 1112.259535][   T39] audit: type=1800 audit(1110.250:2): pid=3552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="vda" ino=647 res=0 errno=0
[ 1112.896746][   T39] audit: type=1800 audit(1110.910:3): pid=3552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="vda" ino=647 res=0 errno=0
00:18:32 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x50500, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"72e3502328e5e79decb8c015089a02ea", 0x0, 0x0, {0xf0, 0x7}, {0x5, 0x2}, 0x5, [0x8000, 0x9, 0x0, 0x2b, 0x7, 0x40, 0x7fffffff, 0xffff, 0x241, 0x8000, 0x9, 0xfff, 0x1, 0x5, 0x7, 0x4]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r2}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r3 = accept$nfc_llcp(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x60)
sendfile(r1, r3, 0x0, 0x33fe2)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4)

00:18:34 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/timer\x00', 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
fcntl$setstatus(r0, 0x4, 0x400)

00:18:37 executing program 0:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x80000001}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000040)={[{@noinit_itable='noinit_itable'}]})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x2, @desc4='\x85\xba\xa1t\xf0\xcb\x11B'})

00:18:38 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75eaffe8", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfff, 0x880)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes128, 0x3, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'})

[ 1121.254377][ T3563] loop0: detected capacity change from 0 to 264192
[ 1122.075672][ T3563] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none.
[ 1122.555581][ T3570] tmpfs: Unknown parameter 'uêÿè00000000000000000000'
[ 1122.813218][ T3570] tmpfs: Unknown parameter 'uêÿè00000000000000000000'
00:18:42 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = fcntl$dupfd(r0, 0xc0a, r0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xe3, "6fc0ada4d0840a348e4289c2f0b98b61d1278db13e7248954f60d589b486088911cc13eae8b7803d9c5ededcab244fe70221eb5be8739253833bc379dd246ab97f1a2a1338f0c779813150840ff452e9fdb527a284c1af96a287594de17f58115e115b8e2a9afa69978e9014db1f3911e1239f065e6c31f5a68d68020df5a1ecd350a8944a562ff122ce068a4ce7bb37ef7d91531f5836f8db28f5b5f73d6dcce95236e20a33c7409b72492fe818046603d72dabefe7fbd42ab5a3d9406b65cd5e6ac07785cf900e538d33df214576801de495133b03d6d36fdd2f9082de32cbc163ed"}, &(0x7f00000001c0)=0xeb)

00:18:43 executing program 1:
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x10010, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x4000, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r3 = getuid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=','])
getgroups(0x8, &(0x7f00000000c0)=[0x0, <r4=>0xee00, 0x0, 0xee01, 0x0, 0xee00, 0xee00, 0xffffffffffffffff])
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x8, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, '/dev/fuse\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}})

[ 1127.821115][ T3575] fuse: Bad value for 'fd'
[ 1128.191422][ T3578] fuse: Bad value for 'fd'
00:18:47 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
execve(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)=',-}3}!\x00', &(0x7f0000000300)='\x00', &(0x7f00000002c0)='!(\x00'], &(0x7f0000000380)=[&(0x7f0000000340)='(](\x00'])
r0 = syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1001024, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user'}}]}})
linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0xc00)

00:18:49 executing program 1:
capset(&(0x7f0000000440)={0x20080522}, &(0x7f00000002c0)={0x0, 0xffff, 0x0, 0x6, 0x9})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = gettid()
getpriority(0x1, r1)
capset(&(0x7f0000000300)={0x0, r1}, &(0x7f0000000340)={0x2, 0x9, 0xff, 0x80, 0x401, 0x400})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x20840, 0x0)
ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f0000000280)={0xfff, 0x0, 0x4, 0xa5af, 0x7, 0x5, 0x3ff})
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x9, r2, &(0x7f00000004c0)="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", 0x1000, 0x8, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4f3eddce7ffd3ca, 0x80, r3, &(0x7f0000000100)="9c793354c2b261dd8762675a634b9e236f759b6b0bc38b9f56476856bacd83dbda32a85a82c4d7318a14ef8bca530580baf4227b0808178d76ae69e6920a04b65d6ed3d9aa4aa50405f3832dd926eb976fc7f3235570ecfd69b1", 0x5a, 0x1, 0x0, 0x1, r4}])
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)

00:18:54 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe64e1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x80000)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r3, 0x2}, 0x18)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r6=>0x0})
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000480)=""/90)
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2}, 0x18)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf250f000000280001800800030001000000140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300010000001800018014000200767863616e31000000000000000000006000018008000300030000001400020076657468315f766c616e000000000000140002007465616d30000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="3000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100fbaeafca19535d8a193febb3185db4eea9ca4ea17641338f43547c7827d1be345db4136b9f5151eec910ebd1403cd4a3b2552c9e60", @ANYRES32=r4, @ANYBLOB="140002007767310000000000000000000000000018000180140002006970766c616e3000000000000000000018000180140002006d61637365633000000000000000000028000180080003000200000008000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e310400"/20], 0x148}, 0x1, 0x0, 0x0, 0x20008880}, 0xc044)
ftruncate(r0, 0x4d0)
openat(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x100)
ftruncate(r0, 0x1)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r7, 0x8008af26, 0xe9002)
writev(r0, &(0x7f0000001240)=[{&(0x7f0000001140)='D', 0x1}], 0x1)

00:18:54 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)=0x2)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140)={{0x8b, 0x4}, 0x4}, 0x10)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:00 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)=0x2)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140)={{0x8b, 0x4}, 0x4}, 0x10)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:00 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe64e1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x80000)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r3, 0x2}, 0x18)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r6=>0x0})
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000480)=""/90)
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2}, 0x18)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf250f000000280001800800030001000000140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300010000001800018014000200767863616e31000000000000000000006000018008000300030000001400020076657468315f766c616e000000000000140002007465616d30000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="3000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100fbaeafca19535d8a193febb3185db4eea9ca4ea17641338f43547c7827d1be345db4136b9f5151eec910ebd1403cd4a3b2552c9e60", @ANYRES32=r4, @ANYBLOB="140002007767310000000000000000000000000018000180140002006970766c616e3000000000000000000018000180140002006d61637365633000000000000000000028000180080003000200000008000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e310400"/20], 0x148}, 0x1, 0x0, 0x0, 0x20008880}, 0xc044)
ftruncate(r0, 0x4d0)
openat(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x100)
ftruncate(r0, 0x1)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r7, 0x8008af26, 0xe9002)
writev(r0, &(0x7f0000001240)=[{&(0x7f0000001140)='D', 0x1}], 0x1)

00:19:04 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)=0x2)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140)={{0x8b, 0x4}, 0x4}, 0x10)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:06 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe64e1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x80000)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r3, 0x2}, 0x18)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r6=>0x0})
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000480)=""/90)
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2}, 0x18)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf250f000000280001800800030001000000140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300010000001800018014000200767863616e31000000000000000000006000018008000300030000001400020076657468315f766c616e000000000000140002007465616d30000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="3000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100fbaeafca19535d8a193febb3185db4eea9ca4ea17641338f43547c7827d1be345db4136b9f5151eec910ebd1403cd4a3b2552c9e60", @ANYRES32=r4, @ANYBLOB="140002007767310000000000000000000000000018000180140002006970766c616e3000000000000000000018000180140002006d61637365633000000000000000000028000180080003000200000008000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e310400"/20], 0x148}, 0x1, 0x0, 0x0, 0x20008880}, 0xc044)
ftruncate(r0, 0x4d0)
openat(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x100)
ftruncate(r0, 0x1)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r7, 0x8008af26, 0xe9002)
writev(r0, &(0x7f0000001240)=[{&(0x7f0000001140)='D', 0x1}], 0x1)

00:19:09 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)=0x2)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140)={{0x8b, 0x4}, 0x4}, 0x10)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:12 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)=0x2)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140)={{0x8b, 0x4}, 0x4}, 0x10)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:14 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)=0x2)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140)={{0x8b, 0x4}, 0x4}, 0x10)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:16 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0x10)
fallocate(r0, 0x20, 0x0, 0x8800000)
bind(r0, &(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0xda, 0x0, "f1cb159022ca70adf6a86909c4f318b1e5ff08f19cab961c424128b50c7a5f89fc10435412ae4f21ac7974b3865abaf98b410d41d8809b52bfb99e32bda41b", 0x31}, 0x80)

00:19:18 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)=0x2)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140)={{0x8b, 0x4}, 0x4}, 0x10)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:21 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0x10)
fallocate(r0, 0x20, 0x0, 0x8800000)
bind(r0, &(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0xda, 0x0, "f1cb159022ca70adf6a86909c4f318b1e5ff08f19cab961c424128b50c7a5f89fc10435412ae4f21ac7974b3865abaf98b410d41d8809b52bfb99e32bda41b", 0x31}, 0x80)

00:19:23 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)=0x2)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140)={{0x8b, 0x4}, 0x4}, 0x10)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:25 executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000102030405060708090a0b0c0d0e0f10111213141516172728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"])
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1, 0x9)

00:19:27 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)=0x2)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140)={{0x8b, 0x4}, 0x4}, 0x10)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

[ 1170.239468][   T39] audit: type=1804 audit(1168.250:4): pid=3619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir111379437/syzkaller.RtVQmD/15/file1" dev="vda" ino=640 res=1 errno=0
[ 1172.452775][   T39] audit: type=1804 audit(1170.460:5): pid=3622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir111379437/syzkaller.RtVQmD/15/file1" dev="vda" ino=640 res=1 errno=0
[ 1172.529215][   T39] audit: type=1804 audit(1170.540:6): pid=3622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir111379437/syzkaller.RtVQmD/15/file1" dev="vda" ino=640 res=1 errno=0
[ 1173.233810][ T3625] fscrypt: Error allocating hmac(sha512): -4
[ 1173.382180][ T3619] fscrypt: Error allocating hmac(sha512): -2
00:19:34 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0)
pwritev2(r0, &(0x7f0000001180)=[{&(0x7f0000000000)='C', 0xff00}], 0x1, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000480)='./file0\x00', 0x5cab)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x14b200)
write$rfkill(r0, &(0x7f00000001c0)={0x7, 0x6}, 0x8)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_MARK_MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:19:34 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0xe, 0x0, &(0x7f0000000080)=0x2)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:38 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:40 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0)
pwritev2(r0, &(0x7f0000001180)=[{&(0x7f0000000000)='C', 0xff00}], 0x1, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000480)='./file0\x00', 0x5cab)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x14b200)
write$rfkill(r0, &(0x7f00000001c0)={0x7, 0x6}, 0x8)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_MARK_MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:19:43 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:46 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0)
pwritev2(r0, &(0x7f0000001180)=[{&(0x7f0000000000)='C', 0xff00}], 0x1, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000480)='./file0\x00', 0x5cab)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x14b200)
write$rfkill(r0, &(0x7f00000001c0)={0x7, 0x6}, 0x8)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_MARK_MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:19:47 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:51 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:52 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0)
pwritev2(r0, &(0x7f0000001180)=[{&(0x7f0000000000)='C', 0xff00}], 0x1, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000480)='./file0\x00', 0x5cab)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x14b200)
write$rfkill(r0, &(0x7f00000001c0)={0x7, 0x6}, 0x8)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_MARK_MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:19:56 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:19:59 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:00 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:04 executing program 0:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
close(r0)

00:20:06 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:11 executing program 0:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
close(r0)

00:20:14 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:19 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:21 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:24 executing program 0:
mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x7975, &(0x7f0000000080), &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x8000000)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x18}, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r4, &(0x7f0000000100)={0xa0000002}, r5}, 0x9)

00:20:26 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:29 executing program 0:
mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x7975, &(0x7f0000000080), &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x8000000)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x18}, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r4, &(0x7f0000000100)={0xa0000002}, r5}, 0x9)

00:20:29 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:33 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:33 executing program 0:
mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x7975, &(0x7f0000000080), &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x8000000)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x18}, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r4, &(0x7f0000000100)={0xa0000002}, r5}, 0x9)

00:20:37 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:38 executing program 0:
mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x7975, &(0x7f0000000080), &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x8000000)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x18}, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r4, &(0x7f0000000100)={0xa0000002}, r5}, 0x9)

00:20:41 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:42 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:45 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

00:20:46 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:20:49 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

00:20:51 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400, 0x62, 0x18}, 0x18)
ioctl$FIOCLEX(r1, 0x5451)
ioctl$VHOST_RESET_OWNER(r3, 0x8008af26, 0xe9002)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x44)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000b, 0x10, r3, 0x82b0d000)

00:20:53 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

00:20:56 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r2 = getuid()
r3 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000000000000400=\x00'/42, @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3])
fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)

00:20:58 executing program 1 (fault-call:3 fault-nth:0):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

[ 1261.476314][ T3710] fuse: Unknown parameter ''
[ 1261.776331][ T3710] fuse: Unknown parameter ''
[ 1262.236578][ T3712] FAULT_INJECTION: forcing a failure.
[ 1262.236578][ T3712] name failslab, interval 1, probability 0, space 0, times 1
[ 1262.266799][ T3712] CPU: 0 PID: 3712 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 1262.269485][ T3712] Hardware name: riscv-virtio,qemu (DT)
[ 1262.270775][ T3712] Call Trace:
[ 1262.271779][ T3712] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 1262.273392][ T3712] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 1262.275366][ T3712] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 1262.276765][ T3712] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 1262.278806][ T3712] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 1262.280955][ T3712] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 1262.282372][ T3712] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 1262.283764][ T3712] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 1262.285193][ T3712] [<ffffffe00001f31a>] vm_area_dup+0x36/0x182
[ 1262.286518][ T3712] [<ffffffe000349878>] __split_vma+0x7c/0x2f0
[ 1262.288375][ T3712] [<ffffffe000349cc0>] __do_munmap+0x158/0x8a8
[ 1262.289727][ T3712] [<ffffffe00034a624>] do_munmap+0x2e/0x3e
[ 1262.291048][ T3712] [<ffffffe0003523e6>] sys_mremap+0xa0c/0xaec
[ 1262.292591][ T3712] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:21:01 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0x9, 0x4)
dup3(r0, r1, 0x0)

00:21:03 executing program 1 (fault-call:3 fault-nth:1):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:21:05 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0)
ppoll(&(0x7f0000000340)=[{r0, 0x274b}], 0x1, &(0x7f0000000380), 0x0, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ttyprintk\x00', 0x8400, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x100, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0)
fsync(r1)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000040)={{0x3a, 0x1}, 'port1\x00', 0xa8, 0x40010, 0x80000001, 0x7, 0x9, 0x100, 0x81, 0x0, 0x0, 0x25})

[ 1267.531899][ T3718] FAULT_INJECTION: forcing a failure.
[ 1267.531899][ T3718] name failslab, interval 1, probability 0, space 0, times 0
[ 1267.534143][ T3718] CPU: 0 PID: 3718 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 1267.535686][ T3718] Hardware name: riscv-virtio,qemu (DT)
[ 1267.536731][ T3718] Call Trace:
[ 1267.538119][ T3718] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 1267.539817][ T3718] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 1267.541719][ T3718] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 1267.543058][ T3718] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 1267.544409][ T3718] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 1267.545833][ T3718] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 1267.547497][ T3718] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 1267.549461][ T3718] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 1267.550832][ T3718] [<ffffffe000358758>] anon_vma_clone+0xa4/0x32e
[ 1267.552277][ T3718] [<ffffffe000349902>] __split_vma+0x106/0x2f0
[ 1267.553692][ T3718] [<ffffffe000349cc0>] __do_munmap+0x158/0x8a8
[ 1267.555096][ T3718] [<ffffffe00034a624>] do_munmap+0x2e/0x3e
[ 1267.556498][ T3718] [<ffffffe0003523e6>] sys_mremap+0xa0c/0xaec
[ 1267.558479][ T3718] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:21:07 executing program 1 (fault-call:3 fault-nth:2):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

[ 1272.062252][ T3724] FAULT_INJECTION: forcing a failure.
[ 1272.062252][ T3724] name failslab, interval 1, probability 0, space 0, times 0
[ 1272.064759][ T3724] CPU: 0 PID: 3724 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 1272.067076][ T3724] Hardware name: riscv-virtio,qemu (DT)
[ 1272.068736][ T3724] Call Trace:
[ 1272.069630][ T3724] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 1272.071123][ T3724] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 1272.072562][ T3724] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 1272.073936][ T3724] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 1272.075258][ T3724] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 1272.076707][ T3724] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 1272.078998][ T3724] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 1272.080495][ T3724] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 1272.082117][ T3724] [<ffffffe00001f31a>] vm_area_dup+0x36/0x182
[ 1272.084474][ T3724] [<ffffffe000349878>] __split_vma+0x7c/0x2f0
[ 1272.085921][ T3724] [<ffffffe000349cc0>] __do_munmap+0x158/0x8a8
[ 1272.087694][ T3724] [<ffffffe00034a624>] do_munmap+0x2e/0x3e
[ 1272.089139][ T3724] [<ffffffe00035238c>] sys_mremap+0x9b2/0xaec
[ 1272.090660][ T3724] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:21:12 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0)
ppoll(&(0x7f0000000340)=[{r0, 0x274b}], 0x1, &(0x7f0000000380), 0x0, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ttyprintk\x00', 0x8400, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x100, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0)
fsync(r1)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000040)={{0x3a, 0x1}, 'port1\x00', 0xa8, 0x40010, 0x80000001, 0x7, 0x9, 0x100, 0x81, 0x0, 0x0, 0x25})

00:21:12 executing program 1 (fault-call:3 fault-nth:3):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

[ 1276.383621][ T3729] FAULT_INJECTION: forcing a failure.
[ 1276.383621][ T3729] name failslab, interval 1, probability 0, space 0, times 0
[ 1276.390296][ T3729] CPU: 1 PID: 3729 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 1276.391670][ T3729] Hardware name: riscv-virtio,qemu (DT)
[ 1276.392967][ T3729] Call Trace:
[ 1276.394053][ T3729] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 1276.395309][ T3729] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 1276.396531][ T3729] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 1276.398097][ T3729] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 1276.399601][ T3729] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 1276.400839][ T3729] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 1276.401915][ T3729] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 1276.402967][ T3729] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 1276.404137][ T3729] [<ffffffe000358758>] anon_vma_clone+0xa4/0x32e
[ 1276.405395][ T3729] [<ffffffe000349902>] __split_vma+0x106/0x2f0
[ 1276.406502][ T3729] [<ffffffe000349cc0>] __do_munmap+0x158/0x8a8
[ 1276.408209][ T3729] [<ffffffe00034a624>] do_munmap+0x2e/0x3e
[ 1276.409954][ T3729] [<ffffffe00035238c>] sys_mremap+0x9b2/0xaec
[ 1276.411168][ T3729] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:21:16 executing program 1 (fault-call:3 fault-nth:4):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:21:17 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0)
ppoll(&(0x7f0000000340)=[{r0, 0x274b}], 0x1, &(0x7f0000000380), 0x0, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ttyprintk\x00', 0x8400, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x100, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0)
fsync(r1)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000040)={{0x3a, 0x1}, 'port1\x00', 0xa8, 0x40010, 0x80000001, 0x7, 0x9, 0x100, 0x81, 0x0, 0x0, 0x25})

[ 1281.280680][ T3732] FAULT_INJECTION: forcing a failure.
[ 1281.280680][ T3732] name failslab, interval 1, probability 0, space 0, times 0
[ 1281.282918][ T3732] CPU: 0 PID: 3732 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 1281.284316][ T3732] Hardware name: riscv-virtio,qemu (DT)
[ 1281.285269][ T3732] Call Trace:
[ 1281.286743][ T3732] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 1281.288855][ T3732] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 1281.290164][ T3732] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 1281.291535][ T3732] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 1281.293369][ T3732] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 1281.294847][ T3732] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 1281.296612][ T3732] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 1281.297836][ T3732] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 1281.299434][ T3732] [<ffffffe00001f31a>] vm_area_dup+0x36/0x182
[ 1281.300439][ T3732] [<ffffffe00034af80>] copy_vma+0x240/0x414
[ 1281.301467][ T3732] [<ffffffe00035138e>] move_vma+0x216/0x862
[ 1281.302680][ T3732] [<ffffffe0003522e6>] sys_mremap+0x90c/0xaec
[ 1281.303796][ T3732] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
[ 1281.658429][    C1] hrtimer: interrupt took 1326900 ns
00:21:21 executing program 1 (fault-call:3 fault-nth:5):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:21:21 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0)
ppoll(&(0x7f0000000340)=[{r0, 0x274b}], 0x1, &(0x7f0000000380), 0x0, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ttyprintk\x00', 0x8400, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x100, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0)
fsync(r1)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000040)={{0x3a, 0x1}, 'port1\x00', 0xa8, 0x40010, 0x80000001, 0x7, 0x9, 0x100, 0x81, 0x0, 0x0, 0x25})

[ 1286.130603][ T3736] FAULT_INJECTION: forcing a failure.
[ 1286.130603][ T3736] name failslab, interval 1, probability 0, space 0, times 0
[ 1286.132703][ T3736] CPU: 1 PID: 3736 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 1286.134024][ T3736] Hardware name: riscv-virtio,qemu (DT)
[ 1286.134959][ T3736] Call Trace:
[ 1286.135741][ T3736] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 1286.137221][ T3736] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 1286.139083][ T3736] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 1286.140392][ T3736] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 1286.141635][ T3736] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 1286.143602][ T3736] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 1286.144868][ T3736] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 1286.146047][ T3736] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 1286.147552][ T3736] [<ffffffe000358758>] anon_vma_clone+0xa4/0x32e
[ 1286.149561][ T3736] [<ffffffe00034afde>] copy_vma+0x29e/0x414
[ 1286.150828][ T3736] [<ffffffe00035138e>] move_vma+0x216/0x862
[ 1286.152139][ T3736] [<ffffffe0003522e6>] sys_mremap+0x90c/0xaec
[ 1286.153506][ T3736] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:21:26 executing program 1 (fault-call:3 fault-nth:6):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:21:26 executing program 0:
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
flistxattr(r0, &(0x7f0000000040)=""/135, 0x87)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x13, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}}, 0x0)
r2 = socket(0x3, 0x2, 0x7fff)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfff8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xdb48}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc6c}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x40}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x2004c0d0)

[ 1291.412446][ T3742] FAULT_INJECTION: forcing a failure.
[ 1291.412446][ T3742] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1291.439401][ T3742] CPU: 1 PID: 3742 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 1291.443244][ T3742] Hardware name: riscv-virtio,qemu (DT)
[ 1291.444526][ T3742] Call Trace:
[ 1291.445440][ T3742] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 1291.446913][ T3742] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 1291.449028][ T3742] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 1291.450969][ T3742] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 1291.452312][ T3742] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 1291.454311][ T3742] [<ffffffe000a37532>] should_fail_usercopy+0x1e/0x26
[ 1291.455797][ T3742] [<ffffffe000974ed2>] _copy_to_user+0x34/0xc0
[ 1291.457540][ T3742] [<ffffffe00045901c>] simple_read_from_buffer+0xbe/0x120
[ 1291.459014][ T3742] [<ffffffe0005548aa>] proc_fail_nth_read+0x104/0x16e
[ 1291.460589][ T3742] [<ffffffe0003f9210>] vfs_read+0x108/0x2ac
[ 1291.462655][ T3742] [<ffffffe0003f9724>] ksys_read+0xb4/0x1b8
[ 1291.464050][ T3742] [<ffffffe0003f9850>] sys_read+0x28/0x36
[ 1291.465379][ T3742] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:21:32 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:21:33 executing program 0:
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
flistxattr(r0, &(0x7f0000000040)=""/135, 0x87)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x13, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}}, 0x0)
r2 = socket(0x3, 0x2, 0x7fff)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfff8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xdb48}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc6c}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x40}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x2004c0d0)

00:21:38 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:21:39 executing program 0:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[])
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x13, @desc3='\xe8\xda\xb9\x924\xbb1.'})
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='mnt/encrypted_dir/file\x00', 0x42, 0x0)
write(r1, 0x0, 0x0)

[ 1304.365280][ T3755] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
00:21:43 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3007, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

[ 1305.821675][ T3755] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
00:21:45 executing program 0:
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000144c0)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109023b0001010000000904000000020600001a24060000052400000905820200060000000905030200"/77], 0x0)

00:21:47 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3008, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

[ 1310.891523][ T3358] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[ 1311.582660][ T3358] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1311.864792][ T3358] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1311.873057][ T3358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1311.874783][ T3358] usb 1-1: Product: syz
[ 1311.875869][ T3358] usb 1-1: Manufacturer: syz
[ 1311.901251][ T3358] usb 1-1: SerialNumber: syz
[ 1312.579308][ T3358] usb 1-1: bad CDC descriptors
[ 1313.260536][ T3358] usb 1-1: USB disconnect, device number 2
00:21:52 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1007, 0x3, &(0x7f0000ffc000/0x1000)=nil)

[ 1315.100807][ T3157] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[ 1315.499263][ T3157] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1315.709363][ T3157] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1315.711226][ T3157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1315.713196][ T3157] usb 1-1: Product: syz
[ 1315.714301][ T3157] usb 1-1: Manufacturer: syz
[ 1315.715444][ T3157] usb 1-1: SerialNumber: syz
[ 1315.995666][ T3157] usb 1-1: bad CDC descriptors
[ 1316.233198][ T3157] usb 1-1: USB disconnect, device number 3
00:21:56 executing program 0:
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000144c0)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109023b0001010000000904000000020600001a24060000052400000905820200060000000905030200"/77], 0x0)

00:21:57 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1008, 0x3, &(0x7f0000ffc000/0x1000)=nil)

[ 1320.511237][ T3226] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[ 1320.913020][ T3226] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1321.081870][ T3226] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1321.083895][ T3226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.085557][ T3226] usb 1-1: Product: syz
[ 1321.101373][ T3226] usb 1-1: Manufacturer: syz
[ 1321.102794][ T3226] usb 1-1: SerialNumber: syz
[ 1321.440065][ T3226] usb 1-1: bad CDC descriptors
[ 1322.198812][ T3510] usb 1-1: USB disconnect, device number 4
00:22:01 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1200, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:05 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3007, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:06 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:11 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1200, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:13 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:20 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:23 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100f00, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r3, 0x10, 0x0, 0xffff, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20)
preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/49, 0x31}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000400)=""/36, 0x24}], 0x4, 0x8, 0x7ff, 0x12)
sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv4_getnetconf={0x2c, 0x52, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x400d0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getnetconf={0x24, 0x52, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffff487}]}, 0x24}}, 0x0)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x20000, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@mpls_getroute={0xb8, 0x1a, 0x10, 0x70bd26, 0x25dfdbff, {0x1c, 0x0, 0x0, 0xd, 0x0, 0x2, 0xfd, 0x3, 0x2200}, [@RTA_DST={0x8, 0x1, {0xea09}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x11}, @RTA_NEWDST={0x84, 0x13, [{0x9, 0x0, 0x1}, {0xcc2a}, {0x7}, {0x1000, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x80}, {0x1000, 0x0, 0x1}, {0x7}, {0x7, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4ff}, {0x9}, {0x51, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x80}, {0xffffd}, {0x4, 0x0, 0x1}, {0x787b, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xbc6}, {0x3ff, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x180, 0x0, 0x1}, {0xfffc0, 0x0, 0x1}, {0xac0, 0x0, 0x1}, {0x400, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8d}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x41)

00:22:30 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x900e00, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:33 executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)

00:22:35 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x20ffc000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:36 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x17}})

00:22:39 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3fdf003000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:40 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x17}})

00:22:44 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x17}})

00:22:44 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3fdf004000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:48 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3ffffff000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:48 executing program 0:
ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000040))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r1 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000680)={0x80, 0x1, 0xc9, 0x4, <r2=>0x0}, &(0x7f00000006c0)=0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000500)={<r3=>r2, @in6={{0xa, 0x4e20, 0x8, @mcast1, 0x7}}}, &(0x7f00000005c0)=0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000600)={r3, 0x3}, &(0x7f0000000640)=0x8)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
close(r4)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x6, 0x6388, 0x6}, 0x8)
r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x14, &(0x7f0000000840)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000028020000028400001b8000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e39333832373135313800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001f4ebd2e6bb144ba8e000d53fbc5896c010000000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003500000000000000", 0x40, 0x540}, {&(0x7f0000000740)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000010400)="ff3f000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000e0f4655fe1f4655fe1f4655f00000000000004000800000000000000050000000600"/64, 0x40, 0x4100}, {&(0x7f0000012600)="20000000dc5271addc5271ad00000000e0f4655f00"/32, 0x20, 0x5}, {&(0x7f0000012700)="c041000000300000e0f4655fe0f4655fe0f4655f000000000000020018000000000000000000000007000000080000000900"/64, 0x40, 0x4a00}, {&(0x7f0000012800)="20000000b57885bc78474f1500000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000012900)="ed4100003c000000e1f4655fe1f4655fe1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000f736dadd00000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4b00}, {&(0x7f0000012a00)="ed8100001a040000e1f4655fe1f4655fe1f4655f00000000000001000800000000000000010000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f024aad600000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012b00)="ffa1000026000000e1f4655fe1f4655fe1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3933383237313531382f66696c65302f66696c653000000000000000000000000000000000000000000000543a54af00000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000400000000000", 0xa0, 0x4d00}, {&(0x7f0000012c00)="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", 0x1a0, 0x4e00}, {&(0x7f0000012e00)="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", 0x100, 0x5000}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000013000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x7000}, {&(0x7f0000013100)="00000000001000"/32, 0x20, 0x8000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x9000}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}, {&(0x7f0000000780)="27e1e68f6d1a368745b6f2a3137fd041fc561edef1392b98472c0b3d265ff47474cf9ac510c62a3b4c92b920b6ab22ffc610a50bbe3d397c697c4cf794c46042c6e3bc128ab642c6b95f8c4ff6e963e64c1e8dc47f76753432f49cc2d6ec10f5bb3f9819e44d67c42453f0972289c38ec2dc919127880dd954505ad845731936a8792e8370a5abfb169893b4d109f7", 0x8f, 0x80}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="8f781484cfe9ec862aaa9d80497509af8c84b279784901b0548a667a846f6fcea73d6393910342fec0281d008ce4dae8f07cb8ebab319b519aac1f622494c927093fc6288fed1da819bb312f064326009b54685a99c783466a6454b7315ea2f9dbadb079d7d6099db43efd665dbd5d56fac06263ce38bd01996c8e46d77c02f29beb9cac261a3aee589e2aaa2d5cd0351b32a8d4fe650179d04a89424819297f53ade4ef9ccf2a599ba14aa475fc1fa3f18b4e2a5da1e21dc6f73bae1b19569a9fa322a3def7a8d3076ad61dce21add3ba07abda63502bc659658ecd06d27d413d8afe90f085e5"])
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r6}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000700)=0x800, 0x4)
openat(r5, &(0x7f0000000080)='./file0\x00', 0x2, 0xc8)

[ 1373.345466][ T3855] loop0: detected capacity change from 0 to 512
[ 1373.606270][ T3855] EXT4-fs (loop0): Unrecognized mount option "�x„Ïéì†*ª�€Iu	¯Œ„²yxI
°TŠfz„ooΧ=c“‘BþÀ(" or missing value
00:22:52 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000000000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:22:55 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcsa\x00', 0x206400, 0x0)
ppoll(&(0x7f00000001c0)=[{r2}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r3, 0x8008af26, 0xe9002)
splice(r3, &(0x7f00000002c0)=0x76a, r0, &(0x7f0000000300)=0x6, 0xfdf, 0xf)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
io_submit(0x0, 0x3, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f0000000000)="657b5fcf99c7d5be9350c89cdc86eb15b1a57aefb1441c2e16bac609d008b5d24db397573ab32524cba8bf48947a0bddfbc351f0b2114e93a8091331aa5a67459c84bc2062cc0f2abfeb781fe5bbc5d7a57fa68a9ecdeaf6979a42878d07290bcc9a13a9b4c51f492b2fb3cf53eb91186591caf097ce0dc6d80b1f2ee2d35727223da7c15200ccb2b5", 0x89, 0x5, 0x0, 0x3, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000000140)="48a790bec3b7c7506cbc83e66322678d20cbdb1d9d3742f1328f6a5bc70c2519ffe2c08f2c2530b81eae88fe9c6b6ff9675661b0275b5ad34339a1b87b7111ffd931391371b77a1c", 0x48, 0x20, 0x0, 0x2, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x7, r4, &(0x7f0000000200)="2b5d8ed7e0b7c6ccf7eba2cb777f610453445365dc6a076a731916e77013be20a3069147b9", 0x25, 0x45, 0x0, 0x2}])
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x406002, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r5 = memfd_create(&(0x7f0000000380)='/dev/dlm-monitor\x00', 0x3)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0)
clone3(&(0x7f00000003c0)={0x1034000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:22:57 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil)

00:23:00 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4226e0, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10)
fallocate(r0, 0x0, 0x8000, 0x4)
fallocate(r0, 0x0, 0x0, 0x8800000)

00:23:00 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil)

00:23:03 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$P9_RREADLINK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="caf469816cb657c8208d16cb4d40dc6dc1c017921798b325619adf04312a33bcf094d14b902e38d734c7eb12bddc9cc645bd5cc6a72a85b98566ebb409a93b5b8f29d90c8b07d1274a2de93933ee06463535a2a9605c6b9d12e9a27b913a0e8466cae814a4d870297fb52942cf0f269a7e6a801ec351bf1842b45cfcb256954aa59890465df126195e9ef97c7392a84464f460c79b99e50bab8b217d592951160052c6c62f77b8dfb408e2c64e68"], 0x10)
fallocate(r0, 0x0, 0x0, 0x8800000)
fdatasync(r0)

00:23:04 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0xa, &(0x7f0000ffc000/0x1000)=nil)

00:23:08 executing program 0:
clone3(&(0x7f0000000000)={0x158ae7000, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x21, 0x0, 0x0, 0xfffffffffffffee6}, 0x58)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

00:23:08 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fff, 0x135203)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}})

00:23:11 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00')
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x18, &(0x7f0000000040)={r3}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r3, 0x5, 0x8, [0x401, 0x1, 0x2b02, 0x4, 0xfff, 0x401, 0x100, 0x7b33]}, 0x18)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwritev2(r4, &(0x7f0000000740)=[{&(0x7f0000000500)="82", 0x1}], 0x1, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwritev(r5, &(0x7f0000000a80)=[{&(0x7f0000000980)='+', 0x1}], 0x1, 0xbfaa, 0x0)
read$dsp(r4, &(0x7f0000000080)=""/171, 0xfdef)

00:23:12 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:23:16 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:23:17 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00')
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x18, &(0x7f0000000040)={r3}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r3, 0x5, 0x8, [0x401, 0x1, 0x2b02, 0x4, 0xfff, 0x401, 0x100, 0x7b33]}, 0x18)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwritev2(r4, &(0x7f0000000740)=[{&(0x7f0000000500)="82", 0x1}], 0x1, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwritev(r5, &(0x7f0000000a80)=[{&(0x7f0000000980)='+', 0x1}], 0x1, 0xbfaa, 0x0)
read$dsp(r4, &(0x7f0000000080)=""/171, 0xfdef)

00:23:21 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r3 = getuid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=','])
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
getuid()
r5 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC=r5])
fchown(r1, r3, r5)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

00:23:22 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38323637333130333000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000d4f4655fd4f4655fd4f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020d4f4655fd4f4655fd4f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000d4f4655fd4f4655fd4f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffd4f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00))
syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0), 0x0, 0x10001}, {&(0x7f0000000480)="3ffef25c7a7bab68568df116ecf43564e2c2ecfd5855830addbba58c1aa8eb62d416864592fe92cc1eddf8238cde95b83a997bc46c5d6a614f53ffec721a26fda44d5a29adff217f3c3cb96ba0210bac1138b351d716bd452636ae2b6ad377fa9dca4e7a328a664ec19447835ea7c46b8bf8b0ee9eae42cc0316dcc77bddf9c192ea0933a3647fc380f1de208e04fce7a9fd9fd041812c859cbf3df39316869f46bf3fed7bb348fa64fbdf21866703347905d55cc44bcbb52dd31f1321cdc4dcb2137b7c863f3698d68f5fa55ef867070988fba4390400ee0a3fcba6b2e4d649801938addde54c16173faa60bb64129889843582ce99c38eaf", 0xf9, 0x8}], 0x22084, &(0x7f0000000180)={[{@huge_advise='huge=advise'}], [{@obj_type={'obj_type', 0x3d, 'ext4\x00'}}, {@permit_directio='permit_directio'}]})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes256, 0x2, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'})

[ 1405.863234][ T3900] fuse: Bad value for 'user_id'
[ 1406.833248][ T3905] loop0: detected capacity change from 0 to 2048
[ 1406.995062][ T3903] fuse: Unknown parameter '00000000000000000'
[ 1407.285060][ T3900] fuse: Bad value for 'user_id'
[ 1407.691739][ T3905] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
00:23:27 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:23:28 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mount$tmpfs(0x20100000, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200)

00:23:33 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
read(r0, &(0x7f0000000080)=""/126, 0x7e)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:23:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x40044000}, 0x8000)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5241479}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x74df4dcb}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x45}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x21}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x26}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x40}]}, @NFT_MSG_DELFLOWTABLE={0xec, 0x18, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'sit0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1de4e609}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000000}, 0xc810)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008010}, 0x815)

00:23:39 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x40010, r1, 0xb4208000)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:23:44 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:23:46 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x66a, &(0x7f0000000080)={0x0, 0xd832, 0x0, 0x3, 0x19e, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100))

00:23:49 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:23:51 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
sendfile(r2, r3, &(0x7f0000000080)=0x1, 0xffff)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x8fc7886dd8b02ec2, 0x10)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000140)={{r4}, 0x0, 0x8000, 0xfffffffffffffff8})
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:23:54 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:23:56 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
signalfd4(r1, &(0x7f0000000000)={[0x4]}, 0x8, 0x0)

00:23:59 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)

00:24:00 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:24:03 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)

00:24:05 executing program 1:
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@ipv4={[], [], @local}, 0x20})
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
close_range(r0, r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
dup3(r0, r2, 0x80000)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
openat(r3, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x1d4)

00:24:08 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)

00:24:10 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000002c0)=0xc)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240))
fcntl$getownex(r0, 0x10, &(0x7f0000000280))
r2 = gettid()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e20, 0x5, @ipv4={[], [], @multicast2}, 0x9}, {0xa, 0x4e22, 0x8, @mcast2, 0x5}, 0x6, [0x7ff, 0x0, 0x0, 0x3800, 0x8, 0x3, 0x8, 0x1]}, 0x5c)
getpriority(0x1, r2)
syz_open_procfs(r2, &(0x7f0000000300)='net/ip_vs\x00')
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/112, 0x70}], 0x1)
r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000400)='tunl0\x00')
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:24:11 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)

00:24:15 executing program 0:
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)

00:24:16 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x151842, 0x1cc)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r2}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xd0, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6c}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x100000001}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7c3a}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x20002000)

00:24:23 executing program 0:
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)

00:24:25 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x620840, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r2}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r3, 0x8008af26, 0xe9002)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3)
ftruncate(r1, 0xfffffffffffffc93)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x1a9242, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000080)=0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
read$dsp(r5, &(0x7f0000000280)=""/75, 0xfffffe61)

00:24:29 executing program 0:
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)

00:24:33 executing program 0:
socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)

00:24:36 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
readv(r0, &(0x7f0000001380)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000001240)=""/139, 0x8b}, {&(0x7f0000001300)=""/68, 0x44}], 0x7)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
syz_io_uring_setup(0x59e6, &(0x7f0000001400)={0x0, 0x3817, 0x4, 0x1, 0xd1, 0x0, r1}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001480), &(0x7f00000014c0))
ppoll(&(0x7f00000001c0)=[{r1, 0xc000}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)

00:24:36 executing program 0:
socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)

00:24:40 executing program 0:
socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}, {0x20, '/dev/vhost-net\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0x105)

00:24:40 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x292c82, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r1}, 0x10)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000000c0))
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x800)
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000340))
ppoll(&(0x7f00000001c0)=[{r2}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
read$dsp(r2, &(0x7f0000000240)=""/246, 0xf6)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0)
r5 = pidfd_getfd(r2, r2, 0x0)
sync_file_range(r5, 0x6f, 0x32b3fd07, 0x2)

00:24:43 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, 0x0, 0x0)

00:24:45 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

00:24:46 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, 0x0, 0x0)

00:24:50 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, 0x0, 0x0)

00:24:52 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000200))
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r2}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="cf75433c7d8fef85bfad09385fb7bd41b48c36754705d5c9531cda53c20e9b4254c98013bcef70bccf1b7e698236c54f0ede7e21608d1ceb2ad5709906c5bdad051d8cbefde5983a07a7673f53c3424b4813740ab695bea3de55b7c661f978011a1203bd6a9b95f42fb8b4bd7bc5cdaf7cc91b4160e5d12271df05d24c3151e9d0d59f16420332ac7bf203357cfca631fbcffac47c45d4237e7856d721ac538aea0f8f9c0030ed212745935a13438b", 0xaf)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r3, 0x8008af26, 0xe9002)
dup(r3)

00:24:53 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}, {0x20, '/de\n\x9c\xeajostJnet\x00'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0xf5)

00:24:57 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}, {}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0xe5)

00:24:58 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000))
mlock2(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1)
mlock2(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13000, 0x0, &(0x7f0000fed000/0x13000)=nil)

00:25:01 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}, {0x20, '.$]+^\x17-'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0xe4)

00:25:02 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$int_out(r1, 0x5460, &(0x7f0000000000))
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:25:05 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}, {}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0xdc)

00:25:07 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil)

00:25:09 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '-,:-}!^'}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0xdb)

00:25:11 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
fcntl$notify(r0, 0x402, 0x13)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:25:13 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0xd3)

00:25:15 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10)
mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:25:17 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9c204a3fa8b34a40a631b00a7ee61269e436d6eaea05f12d09c2b632a941ec15ab08f9cb667bfedfc4487bfc495d891b5118e2c06b01f47df464da7a281590ac05ad13c4e73de2a5f664a786231caa31b8076879d775b462745f8f0e5d8ebb200de52e8"}, 0xd2)

00:25:21 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb)

00:25:21 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
tee(r0, r0, 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
dup(r0)

00:25:24 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb)

00:25:25 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)

00:25:27 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb)

00:25:29 executing program 1:
pwritev2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="552033d3c4240092ec06c8e19275", 0xe}, {&(0x7f0000000080)="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", 0xfe}], 0x2, 0x7, 0x81, 0xf)
r0 = syz_io_uring_complete(0x0)
write$P9_RLERRORu(r0, &(0x7f00000001c0)={0x18, 0x7, 0x2, {{0xb, '.\\*@{\xd8}-/\\-'}, 0x86a}}, 0x18)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:25:31 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c65972fd6490d41285cc3c0ce84d6aa50f360a79ff7eb4bcd349cb22d177e63ad70c7e24785561d71bff4be27687627731c44f9"}, 0x6f)

00:25:33 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x65)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:25:35 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, '-'}, 0xc)

00:25:37 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/dev/vhost-net\x00'}, {}, {0x20, '&\xf3&{$\\%J'}], 0xa, "0e2935e810e7fd286acd1ad5ee240d99db1ee48953b3f77c87c0b5537fa054c0bc17e1f9b3ac617b1680ac6b64d6843c3cce536c260006d4e63fe0c3c8f350b5bd1c32511003ad6970a33070bef1a173fd"}, 0x76)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080))
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)

00:25:38 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, '-'}, 0xc)

00:25:42 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, '-'}, 0xc)

00:25:43 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
write$vhost_msg(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000080)=""/86, 0x56, &(0x7f0000000100)=""/208, 0x2, 0x3}}, 0x48)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0xf, &(0x7f0000ffd000/0x3000)=nil)
syz_io_uring_setup(0x285f, &(0x7f0000000280)={0x0, 0x4cc0, 0x1, 0x2, 0x337, 0x0, r0}, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000), &(0x7f0000000300))

00:25:46 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d16b39e84f4c5fda7a89706f7a8b87fdc4347a657f40c6597"}, 0x3e)

00:25:48 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:25:50 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, '-d'}, 0xd)

00:25:52 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
writev(r2, &(0x7f0000001480)=[{&(0x7f0000000100)="d2d47c574058eb72550d604e263ccf21c7d224552a525b19313d414c48ab8f918076cb9d6a92a4d3e4f0595bc501fc1e9d1b8a4072a06eb97a8d2b27318f76da7820c78616e53104811be6040b040f59c08540b4e46814073ef2ecdd95aa8d1a9de2d737e32443", 0x67}, {&(0x7f0000000180)="6bc74da4a976aa6eb915fac928850c0315723e29ac43b08ca28985203b3a77167ed011a8de2b48fb4f40995c82d77465e388f9e45df36a1296136ee9042c0acadb73e56cc4f6ab1671554c", 0x4b}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="61065938d48b83b3d87011b0012cd55d1771f9d3e8abad0bb17f1f54fc05f8a7bc673d34e4122a9d1a51f4b8795f14c6915a482a9b1c0c5d7ae95663a692198f9933ae4674080f7c045f32b4feaf63b3c91a2bfa6956c7e00e14b0fb3572e8d2d76eb7f84b1130799e7676c1e1069ab92a1fc2100f04a012954f44c795e7f6513b9d9b774f20574d46cd", 0x8a}, {&(0x7f00000012c0)="d9370f85ec594994b1e3834cbfc56c429e8ad33d091e99ff7144436b127518fee5bb1953419f3891325225d3265caba496b4aeb4a0d86bb71c108fe23d66bf34a38efb6c06142f0e23bca97ddb61817a722d16722ca6bbdcc6a69aeb073d05007287cb567945155f064c042b94be05b0dbf589f2d4235ee9015bddad414380324c81e829c63d829ee6f6645f0c8abf3a20811f60336ccd0aee7bf04fbf6c0b227c6015e6bb1f5b7b22750a1296be4bc96da53a81f413d9a8bc19d23e9f45ad8e", 0xc0}, {&(0x7f0000001380)="3a3cf4fba75b4169a4ed182f98d28857cdc3ca3a4ed83292d1783d4a68d815d1bd2fe2b0372cf816633ee42e8a383a4af7d6eee34410db2f6141a84f9c3082d9aa47c3f2b688bb1180b18897c08fbf1e46a392665c14f7d2581c5fb4dc6d52611464889edfd347d8d499a72bfe4cc88743eb2c779b2eb8e70ac2685f4ba5756ac6760d4dc6e538f38b2d641a74168376509c700a09d9fc4e5eb5525eaaa7b05544232f321f34a6d3d23a10b8ea517bcae8984c538c5d8a5eed2c63795ed994b34d6684017a93b09b2505f3098b4007fdea41cea3405756bbab865221dc", 0xdd}], 0x6)

00:25:53 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, '-d'}, 0xd)

00:25:56 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, '-d'}, 0xd)

00:25:57 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r2 = getuid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=','])
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r4 = getuid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r4, @ANYBLOB=','])
syz_mount_image$fuse(&(0x7f0000000080)='fuse\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000100)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@audit='audit'}, {@obj_user={'obj_user', 0x3d, '([^(@('}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vhost-net\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, '-\']'}}, {@euid_gt={'euid>', r4}}, {@obj_role={'obj_role', 0x3d, '#\xaf'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@measure='measure'}]}})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

[ 1561.632917][ T4095] fuse: Bad value for 'fd'
00:25:59 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d64947c2d06f9673bd089ff0f82ea9398bbde8821694fe9cb957d"}, 0x26)

[ 1562.350228][ T4095] fuse: Bad value for 'fd'
00:26:02 executing program 1:
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)

00:26:03 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:06 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:26:06 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:11 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:11 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

00:26:14 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d64947c2d06f9673bd089ff0f82ea"}, 0x1a)

00:26:15 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1)
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x2a43, &(0x7f0000000100)={0x0, 0xe764, 0x10, 0x2, 0x267}, &(0x7f0000fec000/0x13000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180))
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)

00:26:18 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:22 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

00:26:25 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:29 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:26:29 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:32 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d64947c2d06f9673b"}, 0x14)

00:26:34 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x7fffffff, 0xa5, 0x1, 0x2a8, 0x8, [{0x9, 0xffff, 0x5, [], 0x901}, {0x81, 0x8, 0x0, [], 0x2504}, {0x842, 0x7, 0x80000001, [], 0x100}, {0xfff, 0x57c, 0x2, [], 0x30c}, {0x5, 0x401, 0x7, [], 0x400}, {0x4, 0xffff, 0x5, [], 0x2c01}, {0x401, 0xfffffffffffffb65, 0x1, [], 0x106}, {0x2, 0x3, 0x3, [], 0x3000}]})
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:26:35 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:37 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2}, 0x18)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newnexthop={0x7c, 0x68, 0x400, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x2, 0x0, 0x3}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_GROUP_TYPE={0x6}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @NHA_GROUP={0x24, 0x2, [{0x2, 0x4}, {0x0, 0x9}, {0x1, 0x20}, {0x2, 0x1}]}, @NHA_OIF={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:26:38 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:41 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:42 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/60, 0x3c}], 0x1, 0x0, 0x5, 0xb)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000180)=0x7a90)
dup3(r2, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000ffc000/0x1000)=nil)

00:26:44 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d64947c2d06"}, 0x11)

00:26:47 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:48 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000080)=""/232, 0xe8}], 0x2)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:26:51 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:53 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000))
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:26:55 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d6494"}, 0xe)

00:26:58 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x2, 0xff, 0x6, 0x2, 0x9d2e})
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000080))

00:26:58 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d64947c2d"}, 0x10)

00:27:02 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d64947c"}, 0xf)

00:27:03 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x2})
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:27:05 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d64947c"}, 0xf)

00:27:08 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:27:09 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "2d64947c"}, 0xf)

00:27:11 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x2fc6c4dc7d9208dc, 0xfffffffffffff042, 0xbd, 0xffffffffffffffff})
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:27:14 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:27:16 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
close_range(r0, r2, 0x2)
close(r1)

00:27:17 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:27:21 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x6, 0xf3, 0x6, 0x38, 0x2, 0x3, 0x102, 0x3b0, 0x40, 0xcb, 0x9, 0x7ff, 0x38, 0x2, 0x7fff, 0x1ff, 0x2}, [{0x6, 0x1, 0x9789, 0x3, 0x4, 0x80, 0x561, 0xc19}, {0x7, 0xfffffffa, 0xffffffff, 0x6, 0x3ff, 0x9, 0x3, 0x5}], "2eace358dd6e0f76"}, 0xb8)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:27:22 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:27:25 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x141000, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ff9000/0x1000)=nil, 0x1000}, 0x1})

00:27:26 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:27:29 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:27:29 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
pipe2(&(0x7f0000000000), 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11)

00:27:33 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:27:34 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)

00:27:36 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:27:39 executing program 1:
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:27:41 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:27:42 executing program 1:
syz_usb_connect$uac1(0x5, 0xe5, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x1, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x3}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x5, 0xf9, "b736"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x3, 0x0, "eda5a4614500"}, @selector_unit={0x5, 0x24, 0x5, 0x4}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x4, 0xff, 0xff, "b37237effb47"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3f, 0xfffa, 0x81, "40f8d235"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x401, 0x20, "078f32f0f23645b401"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xc7, 0x1, 0x3, 0x7f}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x29, 0x0, {0x7, 0x25, 0x1, 0x85, 0x8, 0xfff9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xff, 0x3, 0x8, 0x7, 'z'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x20, 0x4, 0x2, 0xc6, "a423d2"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x1f, 0xaa, '2', 'Hh'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x20, 0x6, {0x7, 0x25, 0x1, 0x1, 0x2, 0x8}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x6, 0x2, 0x6a, 0x40, 0x9}, 0xaf, &(0x7f0000000180)={0x5, 0xf, 0xaf, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "34b22246ea93f7feb1e5a10150d11a62"}, @generic={0x50, 0x10, 0x1, "0522aec631d03ab7a0b9990ceb81fde052edec751771ea85347b34ef0baca6256013f72256057c426e425258e6e68e9099bd402870698c52d90a0c1618315610da07f239f63a32ea001401c8b0"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "27d353b1bc0407d2e5ad446794e7f70f"}, @ss_container_id={0x14, 0x10, 0x4, 0x1d, "26fed2ee9ba71fa777615105c81a7720"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3f, 0x2, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "127d2f008b4a357edf7fe31f287505e3"}]}, 0x2, [{0x86, &(0x7f0000000240)=@string={0x86, 0x3, "be9a2e0f2f1ca10772f3d854aadc1132ea2b851ef8ad9ade46be27ff76efb9da8bc52ac603fcaf1c894eda510e7dd5ee3974f12c7c7903a324249bc9b66bc4b72ea27c1a8d73d46e936beed1110c24d962299cd5f0006a22b8fd5b56c637d6191a8aec21a20631371092d563c5747307249a2667b27a7fb1f8020be9b66dd9202d169762"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}]})
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x50, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x9, 0x80, 0x16, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b4e9b066"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2000000, 0x0, 0x5, 0x6e}, {0x6, 0x24, 0x1a, 0x8, 0x24}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x2, 0x17}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xfe, 0x99, 0x7f}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x1, 0x7, 0x4, 0x8}, 0xf, &(0x7f0000000440)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xd, 0x3, 0x77}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c09}}, {0xe6, &(0x7f00000004c0)=@string={0xe6, 0x3, "338d42f08b83c0ba238831ad9988e1529145a1fe0289260e5ad4189c1da180f9249d1a1f6bde27ad45bc594d84bdfd926d191c29b5ac81905451bff5c67e25a01e74bbba056a7baba47aa715c4a0c0239d5bc91115dc2a56c6b48289563ae2fea84382589a80320fdad80f3dc1ecb91738a43f474afc716acfa8d55cf65e17f25ee3bc47f2d591b867701e13887d0de2244b63b46957d95541f8159d968291c81dcc3d014082f37108980d261c319b3570c26b973f21879d075b1a24e06ced2b28a84d48b0b218bdf7bf80053b935d4055c1a9f9ecbba9ec1bff459619fd56ddbb1bda9d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x424}}, {0xd7, &(0x7f0000000600)=@string={0xd7, 0x3, "5933d702b4ed7e833a3db6ab608fe266303fa2bc1d9935093205d6a0928bd2f7d1d5238eac1343811b10e9bf07c6b312cd74334cd336131bfc721f488ba3423ca761d6179ad163e13397fb2a336db2d394f4f7ba699ccf0e20615b2c18ff29b0aec060390daa85d56224b70744751950b3d8afe83bc739b1caf32de2195da9391f05d18b0b7bcb838125d504e754c5ca397522317b604efee91fb8593b50406bb1a626af30876a8f0b4b7a6c0ef2c909b194c5de3ab7ecc9db1cc5477e9ae7e76db68f6fafab8d60ed7315bba82c7a92094dba3a7a"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x300a}}]})
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:27:44 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

[ 1667.140236][ T3226] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1667.404138][ T3226] usb 2-1: Using ep0 maxpacket: 32
[ 1667.601639][ T3226] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1667.603681][ T3226] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1668.002637][ T3226] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1668.004567][ T3226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.006121][ T3226] usb 2-1: Product: syz
[ 1668.029362][ T3226] usb 2-1: Manufacturer: �
[ 1668.030753][ T3226] usb 2-1: SerialNumber: syz
[ 1669.314535][ T3226] usb 2-1: 0:2 : does not exist
[ 1669.886819][ T3226] usb 2-1: USB disconnect, device number 2
00:27:49 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

[ 1672.001184][ T3226] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1672.289692][ T3226] usb 2-1: Using ep0 maxpacket: 32
[ 1672.511700][ T3226] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1672.513541][ T3226] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1673.032864][ T3226] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1673.034719][ T3226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1673.036190][ T3226] usb 2-1: Product: syz
[ 1673.039584][ T3226] usb 2-1: Manufacturer: �
[ 1673.040875][ T3226] usb 2-1: SerialNumber: syz
[ 1674.370839][ T3226] usb 2-1: 0:2 : does not exist
[ 1674.779118][ T3226] usb 2-1: USB disconnect, device number 3
00:27:53 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:27:54 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000002ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$chown(0x4, r1, 0xee01, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:27:57 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:27:58 executing program 1:
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @remote}, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth0_to_bridge\x00', 0x0, 0x80000001, 0x100})
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)

00:28:01 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:28:03 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil)

00:28:05 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:28:07 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil)

00:28:10 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:28:12 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
close(r0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x47ad, &(0x7f0000000080)={0x0, 0x667, 0x1, 0x3, 0x310, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100))

00:28:14 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:28:17 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
lseek(r0, 0x2, 0x4)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000, 0x6, &(0x7f0000ff5000/0x1000)=nil)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x30, 0xffffffffffffffff, 0x1ff)

00:28:18 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:28:24 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:28:27 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:28:30 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000340)={0x1, {&(0x7f0000000100)=""/83, 0x53, &(0x7f0000000240)=""/251, 0x1, 0x6}}, 0x48)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000000)=0x80, 0x80000)
fallocate(r2, 0x14, 0x8000, 0xffffffffffffffff)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:28:31 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:28:35 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:28:36 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

00:28:38 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:28:40 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

[ 1724.288962][ T4312] mmap: syz-executor.1 (4312) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
00:28:43 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)

00:28:44 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:28:47 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)

00:28:49 executing program 1:
r0 = socket$inet6(0xa, 0xa, 0x800046)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@remote, 0x4})
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)

00:28:51 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)

00:28:54 executing program 1:
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000140)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x80, &(0x7f0000001280)=[{&(0x7f00000001c0)="91e1d2d02fcc339cc0a888f772f92f5ab8f489b50387d903632102cb3cd7520981f243cdc28e2a89831d11170d21d524890c57de4881189b59d01e50fb00bf9612f8cda4f490fd767969bc0ca9dca1aad7fa3994340323997aa5c5ded089e50f1a6b5c5854341505d9978ed399237dd1a802ec919a6552fe5217d7236283b238405e6aa639760e08655f0eaea2cbed4b60c5", 0x92}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000000)="b9ad4064fb82598f2135d69b0aebf182d01afa20c797ca034b9e2a608be7ee85d60f16f85e4fd4c0", 0x28}], 0x3}, 0x4040)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001300)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
write(r0, &(0x7f0000000080)="77e9aeed61c3ffa4a5b5297fa8f336c1e5c51b5dc7773eb891f8e3affdb86dab84b0ace5a158fed85860a37b561369a9c27221967ea85eee762a978aaedee5276c6dda0291e6acbdb68b8cbc6f6352a1149bca25e4a0fd1bcec114f8438633aa711285f26e6735cf43e0c5d4ad8e6938ae2496c4ce1671c30c800de3a5c1a7d338e0c5c69be2", 0x86)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000, 0x3, &(0x7f0000932000/0x3000)=nil)

00:28:57 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:28:59 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil)

00:29:00 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:29:03 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ff7000/0x3000)=nil)

00:29:05 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:29:07 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x391081, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:29:09 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:12 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = getpid()
getpriority(0x0, r2)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r3, 0x8008af26, 0xe9002)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x30, r3, 0xdf41000)

00:29:13 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:17 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:18 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x5)
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:29:21 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:23 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0x64c2000)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf, 0x1f, 0x100111)

00:29:25 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:26 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x46c540, 0x0)
copy_file_range(r1, 0x0, r0, &(0x7f0000000080)=0xb69, 0x8de9, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r3, 0x8008af26, 0xe9002)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100)='freezer.state\x00', 0x2, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$TIOCGPTPEER(r4, 0x5441, 0x8)
openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x40000)
ppoll(&(0x7f0000000280), 0x2000000000000253, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)=0x80000)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x240002, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
dup3(r5, r0, 0x0)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f00000000c0)=0x19bb)

00:29:28 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:32 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:32 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)

00:29:35 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:37 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ff8000/0x2000)=nil})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x75)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x15)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x1000008, 0x8b3c764f9e7f663a, r3, 0x83000000)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x4, 0x6, 0x49})

00:29:39 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:41 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="f5feffff", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf25040000000c000f0001000000010000000600030001010000060002000100000006000e000010000008000b0004000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r2}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
clock_gettime(0x7, &(0x7f0000000300))
ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000280))
syz_io_uring_setup(0x1613, &(0x7f0000000080)={0x0, 0x3b0, 0x0, 0x2, 0x297, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

00:29:42 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:46 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:47 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:29:50 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:51 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)

00:29:53 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:55 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x149001, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)

00:29:57 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:29:59 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x9, 0x4, 0x0], 0x5, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x1)
syz_io_uring_setup(0x4a44, &(0x7f0000000180)={0x0, 0x801a, 0x0, 0x0, 0x1bb, 0x0, r3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x7cb, &(0x7f0000000080)={0x0, 0x983c, 0x28, 0x2, 0x246, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))

00:30:00 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:30:06 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:30:07 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x2, 0xa5, 0xfff})

00:30:12 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:30:14 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:30:16 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

00:30:19 executing program 1:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000026c0)={0x0, 0x0, <r0=>0x0}, &(0x7f0000002700)=0xc)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r2 = getuid()
r3 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3])
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r5 = getuid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5, @ANYBLOB="9f050000ff0000000000", @ANYRESDEC])
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r7 = getuid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r7, @ANYBLOB="36c376b7ea096f65657ffe77f388092c2c"])
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r9 = getuid()
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000002340)={0x0, 0x5, 0xff})
r10 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r10])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000080)="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", 0x2000, &(0x7f0000002d80)={&(0x7f0000002080)={0x50, 0x0, 0x5, {0x7, 0x21, 0x7fffffff, 0x1000060, 0x56, 0x80, 0xffff, 0x3}}, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x81}}, &(0x7f0000002100)={0x18, 0xfffffffffffffff5, 0x5, {0x1000}}, &(0x7f0000002140)={0x18, 0x0, 0x7, {0xffff}}, &(0x7f0000002180)={0x18, 0x0, 0x7, {0x1ff}}, &(0x7f00000021c0)={0x28, 0x0, 0x8, {{0x800, 0x2, 0x2}}}, &(0x7f0000002200)={0x60, 0x0, 0x3, {{0x3, 0x9, 0xffffffffffffff39, 0x8, 0x5, 0x7, 0x1, 0x2}}}, &(0x7f0000002280)={0x18, 0x0, 0x0, {0x800}}, &(0x7f00000022c0)={0x1f, 0x0, 0x0, {'/dev/vhost-net\x00'}}, &(0x7f0000002300)={0x20, 0xffffffffffffffda, 0xfffffffffffffeff, {0x0, 0x10}}, &(0x7f0000002400)={0x78, 0x0, 0x9, {0x1, 0x8, 0x0, {0x2, 0xc4b, 0x400, 0x43, 0x100, 0x3, 0x5, 0xce, 0x6371, 0xa000, 0xfffff001, 0x0, 0x0, 0x2, 0x2}}}, &(0x7f0000002480)={0x90, 0x0, 0x6, {0x2, 0x0, 0x7, 0x40, 0x2, 0x80000000, {0x6, 0x3ff, 0x2, 0x2, 0xfff, 0x1ff, 0xbef, 0x9f, 0xda33f566, 0x2000, 0x9, 0x0, 0xee01, 0x1e, 0xfffffff7}}}, &(0x7f0000002540)={0x38, 0xffffffffffffffda, 0xdc, [{0x4, 0xff, 0xf, 0x7ff, '/dev/vhost-net\x00'}]}, &(0x7f0000002740)={0x518, 0x0, 0x2, [{{0x3, 0x0, 0x7f, 0x4, 0xff, 0xff, {0x4, 0x81, 0x5a6, 0x6, 0x6, 0x7, 0x8, 0x2, 0xb9800000, 0x4000, 0x8, 0x0, 0xee00, 0x1, 0x449}}, {0x0, 0x10001, 0xf, 0x9, '/dev/vhost-net\x00'}}, {{0x3, 0x2, 0x100000000, 0x9, 0x6, 0xffff0000, {0x1, 0xbcb, 0x80000001, 0x8000000100000, 0x4, 0x33e, 0x322, 0x5, 0x6, 0x8000, 0x800, 0xee01, 0xffffffffffffffff, 0x80, 0xffffffff}}, {0x4, 0x80, 0xf, 0x33154f6, '/dev/vhost-net\x00'}}, {{0x0, 0x2, 0x4a, 0x3, 0x7f, 0x9, {0x6, 0x8, 0x7fff, 0xffffffff7fffffff, 0x7ff, 0x800, 0x5, 0x9, 0x4, 0x6000, 0x6, 0x0, 0x0, 0x400, 0x10001}}, {0x6, 0xfff, 0x0, 0x400}}, {{0x2, 0x3, 0x7fffffff, 0x7ff, 0x5, 0xe0e, {0x4, 0x5c5a, 0xea, 0x3ff, 0xfffffffffffffff7, 0x1, 0x1, 0x80, 0x50, 0x8000, 0x5, 0xee00, 0xee01, 0x3, 0x7}}, {0x1, 0x6, 0x0, 0x3ff}}, {{0x3, 0x2, 0x1, 0x5, 0xffff, 0x200, {0x6, 0x3ff, 0x200, 0x20, 0x7, 0x7ff, 0xffff, 0x6, 0x1, 0x4000, 0x7, 0x0, 0xee00, 0x8, 0x3ff}}, {0x4, 0xdc1f, 0x5, 0x81, '(1[^%'}}, {{0x0, 0x1, 0x6, 0x3, 0x3, 0x5, {0x5, 0x117, 0x400, 0x8, 0x8, 0x8, 0x1, 0x0, 0x8, 0xa000, 0x1, 0xee01, r0, 0x1, 0x6}}, {0x4, 0x2, 0xf, 0x2, '/dev/vhost-net\x00'}}, {{0x0, 0x2, 0x7, 0x5, 0x200, 0x8000, {0x2, 0x7fffffff, 0x7fff, 0x66, 0x7, 0x4, 0x5, 0x8, 0x80000001, 0x8000, 0x4, r2, 0x0, 0xfffffd41, 0x6}}, {0x5, 0x6, 0x1, 0x5329f35a, '/'}}, {{0x2, 0x1, 0x10001, 0x266a, 0x0, 0x81, {0x5, 0x5, 0x8, 0x5a, 0x7ff, 0x100000001, 0x80000001, 0x5, 0x1, 0x6000, 0xa4a, 0xffffffffffffffff, 0x0, 0x3f, 0x80}}, {0x4, 0x0, 0x4, 0x2, '\'[}\''}}]}, &(0x7f0000002c80)={0xa0, 0xb, 0xffffffffffffff91, {{0x4, 0x1, 0x80000001, 0x2, 0xffff, 0x10000, {0x6, 0x55ae, 0x7, 0x401, 0x80, 0x800, 0x10000, 0x4, 0xbea, 0x0, 0x1, r7, r10, 0x0, 0x8000}}, {0x0, 0x10}}}, &(0x7f0000002d40)={0x20, 0x0, 0x80, {0x3f, 0x4, 0x6, 0x7ff}}})
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r11, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)

00:30:21 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)

[ 1823.923772][ T4440] fuse: Bad value for 'user_id'
[ 1824.106617][ T4440] fuse: Bad value for 'user_id'
[ 1827.850667][ T4443] fuse: Bad value for 'user_id'
[ 1828.385924][ T4446] fuse: Bad value for 'user_id'
00:30:29 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:30:30 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3, 0x8000}, {r1, 0x100}, {r3, 0x1103}, {r4, 0x2000}, {r5, 0x8002}], 0x5, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)={[0x1]}, 0x8)
r6 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x9, 0x440000)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r6, 0x40045109, &(0x7f00000002c0)=0x2c1f5a07)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:30:33 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:30:36 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

00:30:37 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:30:40 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000080))
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil)

00:30:40 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3, 0x8000}, {r1, 0x100}, {r3, 0x1103}, {r4, 0x2000}, {r5, 0x8002}], 0x5, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)={[0x1]}, 0x8)
r6 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x9, 0x440000)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r6, 0x40045109, &(0x7f00000002c0)=0x2c1f5a07)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:30:44 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)

00:30:45 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3, 0x8000}, {r1, 0x100}, {r3, 0x1103}, {r4, 0x2000}, {r5, 0x8002}], 0x5, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)={[0x1]}, 0x8)
r6 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x9, 0x440000)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r6, 0x40045109, &(0x7f00000002c0)=0x2c1f5a07)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:30:48 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/178, 0xb2}], 0x1)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x2d55, &(0x7f0000000080)={0x0, 0xef70, 0x8, 0x3, 0x369}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000240)={0x0, 0x3})

00:30:50 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3, 0x8000}, {r1, 0x100}, {r3, 0x1103}, {r4, 0x2000}, {r5, 0x8002}], 0x5, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)={[0x1]}, 0x8)
r6 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x9, 0x440000)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r6, 0x40045109, &(0x7f00000002c0)=0x2c1f5a07)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:30:53 executing program 1:
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={0x0, 0x5, 0xab})
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1})

00:30:54 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3, 0x8000}, {r1, 0x100}, {r3, 0x1103}, {r4, 0x2000}, {r5, 0x8002}], 0x5, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)={[0x1]}, 0x8)
r6 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x9, 0x440000)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r6, 0x40045109, &(0x7f00000002c0)=0x2c1f5a07)

00:30:57 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:30:57 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3, 0x8000}, {r1, 0x100}, {r3, 0x1103}, {r4, 0x2000}, {r5, 0x8002}], 0x5, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)={[0x1]}, 0x8)
syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x9, 0x440000)

00:31:01 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14)
r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x2002)
tee(r5, r0, 0x5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil)

00:31:02 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3, 0x8000}, {r1, 0x100}, {r3, 0x1103}, {r4, 0x2000}, {r5, 0x8002}], 0x5, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)={[0x1]}, 0x8)

00:31:05 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

00:31:07 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:31:09 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:31:10 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)

00:31:12 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0)
r2 = syz_open_procfs$userns(0x0, &(0x7f0000000180)='ns/user\x00')
close(r2)
syz_io_uring_setup(0x51c6, &(0x7f0000000080)={0x0, 0x9f32, 0x10, 0x9, 0x2b4, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))

00:31:15 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:31:19 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)

00:31:20 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)

00:31:22 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x42, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="9d591a3231fd22c5e1f78de51a5cca5a0bd1948b5070ca9bc6", 0x19, r0}, 0x68)
dup3(r0, r0, 0x0)

00:31:24 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:31:26 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7f)

00:31:28 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x61, 0xe4, 0x3e, 0x1, 0x40, 0x0, 0x6, 0x9, 0x229, 0x38, 0x1f5, 0x3f, 0xffff, 0x20, 0x2, 0x0, 0x8001, 0x1f}, [{0x5, 0x3, 0xfffffffe, 0x8, 0xa956, 0x7ff, 0x8, 0x2}], "30f2e6a0ce3a600b05ad409bc51e20994bf3476590526d17ebed2b5159b9e1673ba5ab143972cb2f42e8e4e0a962857d5d2facdfe131b59ffdfb6008655cf6f0e070562292b4439796c8d62fb4d178c86a34714f710aba1d44d73f54876f963f8464fbfcb92969ad09010733dd2278ba18b0206a25b105c00fe67a44ec80b0692be38b95792012e7f5b61742294084cf539ea90fba05950778670f28f65c533ae2a93e41e4306230c9334a091da2e87b39a671fb94547e4b11ce569437c90cde9a28206da87704"}, 0x11f)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:31:31 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x2ddf, &(0x7f0000000080)={0x0, 0x96d3, 0x4, 0x3, 0x17f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100))

00:31:33 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x2)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:31:35 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7f)

00:31:37 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:31:40 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7f)

00:31:41 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:31:44 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7f)

00:31:45 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:31:47 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:31:48 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:31:51 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:31:52 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)

00:31:55 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:31:56 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:31:58 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:01 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:02 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:05 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:05 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:08 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:09 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:11 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:12 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:15 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:15 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:19 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:19 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:22 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:22 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:27 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:28 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:31 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:31 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:35 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:36 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:38 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:39 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)

00:32:41 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:43 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)

00:32:45 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:47 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)

00:32:48 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:50 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:32:52 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:54 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:56 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:32:57 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:33:00 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:33:01 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:33:05 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:33:05 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)

00:33:08 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:33:09 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x2, 0xa5, 0xfff})

00:33:12 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:33:12 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x9, 0x4, 0x0], 0x5, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x1)
syz_io_uring_setup(0x4a44, &(0x7f0000000180)={0x0, 0x801a, 0x0, 0x0, 0x1bb, 0x0, r3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x7cb, &(0x7f0000000080)={0x0, 0x983c, 0x28, 0x2, 0x246, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))

00:33:16 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:33:19 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:33:21 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:33:23 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:33:25 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:33:27 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:33:28 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:33:32 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:33:32 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:33:36 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:33:36 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:33:40 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:33:41 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:33:43 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:33:44 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:33:47 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:33:47 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:33:50 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:33:51 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:33:54 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:33:55 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:33:58 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:33:58 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:02 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:02 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:34:05 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:06 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:34:09 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:10 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)

00:34:13 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:14 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:34:16 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:18 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:34:20 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:22 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:34:24 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:34:25 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:28 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

00:34:31 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
r2 = getpid()
getpriority(0x0, r2)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r3, 0x8008af26, 0xe9002)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x30, r3, 0xdf41000)

00:34:35 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)

00:34:39 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:42 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:34:45 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:46 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000002ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$chown(0x4, r1, 0xee01, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:34:48 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:50 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000002ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$chown(0x4, r1, 0xee01, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:34:53 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:54 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:34:57 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x131000, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:34:58 executing program 0:
syz_usb_connect$uac1(0x5, 0xe5, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x1, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x3}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x5, 0xf9, "b736"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x3, 0x0, "eda5a4614500"}, @selector_unit={0x5, 0x24, 0x5, 0x4}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x4, 0xff, 0xff, "b37237effb47"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3f, 0xfffa, 0x81, "40f8d235"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x401, 0x20, "078f32f0f23645b401"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xc7, 0x1, 0x3, 0x7f}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x29, 0x0, {0x7, 0x25, 0x1, 0x85, 0x8, 0xfff9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xff, 0x3, 0x8, 0x7, 'z'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x20, 0x4, 0x2, 0xc6, "a423d2"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x1f, 0xaa, '2', 'Hh'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x20, 0x6, {0x7, 0x25, 0x1, 0x1, 0x2, 0x8}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x6, 0x2, 0x6a, 0x40, 0x9}, 0xaf, &(0x7f0000000180)={0x5, 0xf, 0xaf, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "34b22246ea93f7feb1e5a10150d11a62"}, @generic={0x50, 0x10, 0x1, "0522aec631d03ab7a0b9990ceb81fde052edec751771ea85347b34ef0baca6256013f72256057c426e425258e6e68e9099bd402870698c52d90a0c1618315610da07f239f63a32ea001401c8b0"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "27d353b1bc0407d2e5ad446794e7f70f"}, @ss_container_id={0x14, 0x10, 0x4, 0x1d, "26fed2ee9ba71fa777615105c81a7720"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3f, 0x2, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "127d2f008b4a357edf7fe31f287505e3"}]}, 0x2, [{0x86, &(0x7f0000000240)=@string={0x86, 0x3, "be9a2e0f2f1ca10772f3d854aadc1132ea2b851ef8ad9ade46be27ff76efb9da8bc52ac603fcaf1c894eda510e7dd5ee3974f12c7c7903a324249bc9b66bc4b72ea27c1a8d73d46e936beed1110c24d962299cd5f0006a22b8fd5b56c637d6191a8aec21a20631371092d563c5747307249a2667b27a7fb1f8020be9b66dd9202d169762"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}]})
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x50, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x9, 0x80, 0x16, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b4e9b066"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2000000, 0x0, 0x5, 0x6e}, {0x6, 0x24, 0x1a, 0x8, 0x24}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x2, 0x17}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xfe, 0x99, 0x7f}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x1, 0x7, 0x4, 0x8}, 0xf, &(0x7f0000000440)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xd, 0x3, 0x77}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c09}}, {0xe6, &(0x7f00000004c0)=@string={0xe6, 0x3, "338d42f08b83c0ba238831ad9988e1529145a1fe0289260e5ad4189c1da180f9249d1a1f6bde27ad45bc594d84bdfd926d191c29b5ac81905451bff5c67e25a01e74bbba056a7baba47aa715c4a0c0239d5bc91115dc2a56c6b48289563ae2fea84382589a80320fdad80f3dc1ecb91738a43f474afc716acfa8d55cf65e17f25ee3bc47f2d591b867701e13887d0de2244b63b46957d95541f8159d968291c81dcc3d014082f37108980d261c319b3570c26b973f21879d075b1a24e06ced2b28a84d48b0b218bdf7bf80053b935d4055c1a9f9ecbba9ec1bff459619fd56ddbb1bda9d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x424}}, {0xd7, &(0x7f0000000600)=@string={0xd7, 0x3, "5933d702b4ed7e833a3db6ab608fe266303fa2bc1d9935093205d6a0928bd2f7d1d5238eac1343811b10e9bf07c6b312cd74334cd336131bfc721f488ba3423ca761d6179ad163e13397fb2a336db2d394f4f7ba699ccf0e20615b2c18ff29b0aec060390daa85d56224b70744751950b3d8afe83bc739b1caf32de2195da9391f05d18b0b7bcb838125d504e754c5ca397522317b604efee91fb8593b50406bb1a626af30876a8f0b4b7a6c0ef2c909b194c5de3ab7ecc9db1cc5477e9ae7e76db68f6fafab8d60ed7315bba82c7a92094dba3a7a"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x300a}}]})
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

[ 2102.799783][ T3420] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 2103.069509][ T3420] usb 1-1: Using ep0 maxpacket: 32
[ 2103.233357][ T3420] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 2103.235304][ T3420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2103.421607][ T3420] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2103.423433][ T3420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2103.424937][ T3420] usb 1-1: Product: syz
[ 2103.426050][ T3420] usb 1-1: Manufacturer: �
[ 2103.442633][ T3420] usb 1-1: SerialNumber: syz
00:35:01 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

[ 2105.441569][ T3420] usb 1-1: 0:2 : does not exist
[ 2105.995425][ T3420] usb 1-1: USB disconnect, device number 5
00:35:06 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:08 executing program 0:
syz_usb_connect$uac1(0x5, 0xe5, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x1, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x3}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x5, 0xf9, "b736"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x3, 0x0, "eda5a4614500"}, @selector_unit={0x5, 0x24, 0x5, 0x4}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x4, 0xff, 0xff, "b37237effb47"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3f, 0xfffa, 0x81, "40f8d235"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x401, 0x20, "078f32f0f23645b401"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xc7, 0x1, 0x3, 0x7f}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x29, 0x0, {0x7, 0x25, 0x1, 0x85, 0x8, 0xfff9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xff, 0x3, 0x8, 0x7, 'z'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x20, 0x4, 0x2, 0xc6, "a423d2"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x1f, 0xaa, '2', 'Hh'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x20, 0x6, {0x7, 0x25, 0x1, 0x1, 0x2, 0x8}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x6, 0x2, 0x6a, 0x40, 0x9}, 0xaf, &(0x7f0000000180)={0x5, 0xf, 0xaf, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "34b22246ea93f7feb1e5a10150d11a62"}, @generic={0x50, 0x10, 0x1, "0522aec631d03ab7a0b9990ceb81fde052edec751771ea85347b34ef0baca6256013f72256057c426e425258e6e68e9099bd402870698c52d90a0c1618315610da07f239f63a32ea001401c8b0"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "27d353b1bc0407d2e5ad446794e7f70f"}, @ss_container_id={0x14, 0x10, 0x4, 0x1d, "26fed2ee9ba71fa777615105c81a7720"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3f, 0x2, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "127d2f008b4a357edf7fe31f287505e3"}]}, 0x2, [{0x86, &(0x7f0000000240)=@string={0x86, 0x3, "be9a2e0f2f1ca10772f3d854aadc1132ea2b851ef8ad9ade46be27ff76efb9da8bc52ac603fcaf1c894eda510e7dd5ee3974f12c7c7903a324249bc9b66bc4b72ea27c1a8d73d46e936beed1110c24d962299cd5f0006a22b8fd5b56c637d6191a8aec21a20631371092d563c5747307249a2667b27a7fb1f8020be9b66dd9202d169762"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}]})
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x50, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x9, 0x80, 0x16, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b4e9b066"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2000000, 0x0, 0x5, 0x6e}, {0x6, 0x24, 0x1a, 0x8, 0x24}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x2, 0x17}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xfe, 0x99, 0x7f}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x1, 0x7, 0x4, 0x8}, 0xf, &(0x7f0000000440)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xd, 0x3, 0x77}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c09}}, {0xe6, &(0x7f00000004c0)=@string={0xe6, 0x3, "338d42f08b83c0ba238831ad9988e1529145a1fe0289260e5ad4189c1da180f9249d1a1f6bde27ad45bc594d84bdfd926d191c29b5ac81905451bff5c67e25a01e74bbba056a7baba47aa715c4a0c0239d5bc91115dc2a56c6b48289563ae2fea84382589a80320fdad80f3dc1ecb91738a43f474afc716acfa8d55cf65e17f25ee3bc47f2d591b867701e13887d0de2244b63b46957d95541f8159d968291c81dcc3d014082f37108980d261c319b3570c26b973f21879d075b1a24e06ced2b28a84d48b0b218bdf7bf80053b935d4055c1a9f9ecbba9ec1bff459619fd56ddbb1bda9d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x424}}, {0xd7, &(0x7f0000000600)=@string={0xd7, 0x3, "5933d702b4ed7e833a3db6ab608fe266303fa2bc1d9935093205d6a0928bd2f7d1d5238eac1343811b10e9bf07c6b312cd74334cd336131bfc721f488ba3423ca761d6179ad163e13397fb2a336db2d394f4f7ba699ccf0e20615b2c18ff29b0aec060390daa85d56224b70744751950b3d8afe83bc739b1caf32de2195da9391f05d18b0b7bcb838125d504e754c5ca397522317b604efee91fb8593b50406bb1a626af30876a8f0b4b7a6c0ef2c909b194c5de3ab7ecc9db1cc5477e9ae7e76db68f6fafab8d60ed7315bba82c7a92094dba3a7a"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x300a}}]})
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

[ 2112.341133][ T3420] usb 1-1: new high-speed USB device number 6 using dummy_hcd
00:35:10 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

[ 2112.610434][ T3420] usb 1-1: Using ep0 maxpacket: 32
[ 2112.929377][ T3420] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 2112.930885][ T3420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2113.114233][ T3420] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2113.115819][ T3420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2113.149722][ T3420] usb 1-1: Product: syz
[ 2113.150797][ T3420] usb 1-1: Manufacturer: �
[ 2113.151741][ T3420] usb 1-1: SerialNumber: syz
[ 2114.791879][ T3420] usb 1-1: 0:2 : does not exist
[ 2115.120705][ T3420] usb 1-1: USB disconnect, device number 6
00:35:14 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:17 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)

00:35:18 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:21 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x7fffffff, 0xa5, 0x1, 0x2a8, 0x8, [{0x9, 0xffff, 0x5, [], 0x901}, {0x81, 0x8, 0x0, [], 0x2504}, {0x842, 0x7, 0x80000001, [], 0x100}, {0xfff, 0x57c, 0x2, [], 0x30c}, {0x5, 0x401, 0x7, [], 0x400}, {0x4, 0xffff, 0x5, [], 0x2c01}, {0x401, 0xfffffffffffffb65, 0x1, [], 0x106}, {0x2, 0x3, 0x3, [], 0x3000}]})
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:35:22 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:24 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x7fffffff, 0xa5, 0x1, 0x2a8, 0x8, [{0x9, 0xffff, 0x5, [], 0x901}, {0x81, 0x8, 0x0, [], 0x2504}, {0x842, 0x7, 0x80000001, [], 0x100}, {0xfff, 0x57c, 0x2, [], 0x30c}, {0x5, 0x401, 0x7, [], 0x400}, {0x4, 0xffff, 0x5, [], 0x2c01}, {0x401, 0xfffffffffffffb65, 0x1, [], 0x106}, {0x2, 0x3, 0x3, [], 0x3000}]})
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:35:26 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:27 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x7fffffff, 0xa5, 0x1, 0x2a8, 0x8, [{0x9, 0xffff, 0x5, [], 0x901}, {0x81, 0x8, 0x0, [], 0x2504}, {0x842, 0x7, 0x80000001, [], 0x100}, {0xfff, 0x57c, 0x2, [], 0x30c}, {0x5, 0x401, 0x7, [], 0x400}, {0x4, 0xffff, 0x5, [], 0x2c01}, {0x401, 0xfffffffffffffb65, 0x1, [], 0x106}, {0x2, 0x3, 0x3, [], 0x3000}]})
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:35:29 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:31 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x7fffffff, 0xa5, 0x1, 0x2a8, 0x8, [{0x9, 0xffff, 0x5, [], 0x901}, {0x81, 0x8, 0x0, [], 0x2504}, {0x842, 0x7, 0x80000001, [], 0x100}, {0xfff, 0x57c, 0x2, [], 0x30c}, {0x5, 0x401, 0x7, [], 0x400}, {0x4, 0xffff, 0x5, [], 0x2c01}, {0x401, 0xfffffffffffffb65, 0x1, [], 0x106}, {0x2, 0x3, 0x3, [], 0x3000}]})
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:35:33 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:35 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x7fffffff, 0xa5, 0x1, 0x2a8, 0x8, [{0x9, 0xffff, 0x5, [], 0x901}, {0x81, 0x8, 0x0, [], 0x2504}, {0x842, 0x7, 0x80000001, [], 0x100}, {0xfff, 0x57c, 0x2, [], 0x30c}, {0x5, 0x401, 0x7, [], 0x400}, {0x4, 0xffff, 0x5, [], 0x2c01}, {0x401, 0xfffffffffffffb65, 0x1, [], 0x106}, {0x2, 0x3, 0x3, [], 0x3000}]})
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:35:36 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:39 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x7fffffff, 0xa5, 0x1, 0x2a8, 0x8, [{0x9, 0xffff, 0x5, [], 0x901}, {0x81, 0x8, 0x0, [], 0x2504}, {0x842, 0x7, 0x80000001, [], 0x100}, {0xfff, 0x57c, 0x2, [], 0x30c}, {0x5, 0x401, 0x7, [], 0x400}, {0x4, 0xffff, 0x5, [], 0x2c01}, {0x401, 0xfffffffffffffb65, 0x1, [], 0x106}, {0x2, 0x3, 0x3, [], 0x3000}]})
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:35:39 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:42 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:35:42 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:46 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:35:46 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:50 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:35:51 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x3, 0x100000)

00:35:54 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:35:55 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:35:57 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:35:59 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

00:36:00 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:36:02 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)

00:36:04 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:36:07 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:08 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:36:10 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:12 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:36:14 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:17 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:36:18 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:20 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:36:21 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:24 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:36:24 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:28 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:28 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:36:33 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:34 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

00:36:37 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:39 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

00:36:41 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:42 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

00:36:45 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:47 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:50 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:51 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:36:53 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:54 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:36:56 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:36:59 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:00 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x100000)

00:37:02 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:05 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

00:37:07 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:08 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

00:37:10 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:11 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)

00:37:14 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:15 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/dev/vhost-net\x00'}, {}, {0x20, '&\xf3&{$\\%J'}], 0xa, "0e2935e810e7fd286acd1ad5ee240d99db1ee48953b3f77c87c0b5537fa054c0bc17e1f9b3ac617b1680ac6b64d6843c3cce536c260006d4e63fe0c3c8f350b5bd1c32511003ad6970a33070bef1a173fd"}, 0x76)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080))
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)

00:37:17 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:19 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/dev/vhost-net\x00'}, {}, {0x20, '&\xf3&{$\\%J'}], 0xa, "0e2935e810e7fd286acd1ad5ee240d99db1ee48953b3f77c87c0b5537fa054c0bc17e1f9b3ac617b1680ac6b64d6843c3cce536c260006d4e63fe0c3c8f350b5bd1c32511003ad6970a33070bef1a173fd"}, 0x76)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080))
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)

00:37:22 executing program 0:
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:24 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/dev/vhost-net\x00'}, {}, {0x20, '&\xf3&{$\\%J'}], 0xa, "0e2935e810e7fd286acd1ad5ee240d99db1ee48953b3f77c87c0b5537fa054c0bc17e1f9b3ac617b1680ac6b64d6843c3cce536c260006d4e63fe0c3c8f350b5bd1c32511003ad6970a33070bef1a173fd"}, 0x76)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080))
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)

00:37:27 executing program 0:
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:29 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/dev/vhost-net\x00'}, {}, {0x20, '&\xf3&{$\\%J'}], 0xa, "0e2935e810e7fd286acd1ad5ee240d99db1ee48953b3f77c87c0b5537fa054c0bc17e1f9b3ac617b1680ac6b64d6843c3cce536c260006d4e63fe0c3c8f350b5bd1c32511003ad6970a33070bef1a173fd"}, 0x76)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080))

00:37:33 executing program 0:
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:35 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/dev/vhost-net\x00'}, {}, {0x20, '&\xf3&{$\\%J'}], 0xa, "0e2935e810e7fd286acd1ad5ee240d99db1ee48953b3f77c87c0b5537fa054c0bc17e1f9b3ac617b1680ac6b64d6843c3cce536c260006d4e63fe0c3c8f350b5bd1c32511003ad6970a33070bef1a173fd"}, 0x76)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:37 executing program 0:
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:39 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/dev/vhost-net\x00'}, {}, {0x20, '&\xf3&{$\\%J'}], 0xa, "0e2935e810e7fd286acd1ad5ee240d99db1ee48953b3f77c87c0b5537fa054c0bc17e1f9b3ac617b1680ac6b64d6843c3cce536c260006d4e63fe0c3c8f350b5bd1c32511003ad6970a33070bef1a173fd"}, 0x76)

00:37:41 executing program 0:
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:43 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:37:45 executing program 0:
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:37:47 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)

00:37:49 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

00:37:51 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:37:52 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

00:37:54 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:37:55 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

00:37:59 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:02 executing program 0:
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:38:03 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:05 executing program 0:
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:38:07 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:09 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

00:38:11 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:14 executing program 0:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:16 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:17 executing program 0:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:19 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:21 executing program 0:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:23 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:25 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

00:38:27 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:30 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:32 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

00:38:35 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:41 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

00:38:42 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:48 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:49 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)

00:38:52 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:55 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)

00:38:55 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:38:59 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:39:00 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)

00:39:03 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

00:39:05 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:07 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

00:39:10 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:13 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

00:39:17 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:19 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

00:39:22 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:25 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)

00:39:27 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:30 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)

00:39:32 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:35 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)

00:39:38 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:41 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)

00:39:43 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:45 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:48 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:51 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:53 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:56 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:39:58 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:40:01 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:40:03 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:40:07 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)

00:40:09 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:40:12 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)

00:40:14 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:40:17 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)

00:40:21 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:40:23 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:40:25 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:40:28 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:40:31 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:40:33 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:40:36 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:40:41 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:40:47 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440), 0x4000)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:40:50 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:40:54 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:40:56 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:40:59 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:01 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:04 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:06 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:09 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:11 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:14 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:16 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:17 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:20 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:22 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:24 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:27 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:29 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440), 0x4000)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:31 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:34 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:35 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:39 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:39 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:43 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:43 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:46 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:48 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:49 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:52 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:53 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:41:57 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:41:58 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:02 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:02 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:05 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:06 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:10 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:10 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:14 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:15 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:18 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:20 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:22 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:24 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:25 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:28 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:30 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:32 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:34 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:37 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:39 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:42 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:47 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:50 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:54 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:42:55 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:42:59 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x0, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:00 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:03 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:04 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:08 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:09 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:11 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:14 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:15 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:18 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:18 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:22 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:23 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:27 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x0, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:27 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:31 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x0, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:32 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:35 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x0, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:36 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:40 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:40 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:44 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:45 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:48 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:48 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:52 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:53 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:43:56 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:43:57 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:44:00 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:44:00 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:44:04 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:44:04 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:44:08 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:44:09 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:44:13 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:44:13 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:44:17 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:44:17 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:44:20 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:44:22 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:44:24 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:44:26 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:44:29 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:44:31 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:44:32 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x0, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:44:34 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:44:37 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:44:39 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:44:45 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000240))

00:44:46 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0)

00:44:49 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000240))

00:44:51 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0)

00:44:54 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000240))

00:44:57 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0)

00:44:59 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0)

00:45:03 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0)

00:45:06 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:09 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0)

00:45:10 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:15 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:45:16 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:19 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:45:20 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:23 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:45:24 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:27 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:45:29 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:31 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:45:33 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:36 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:45:37 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:40 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:45:41 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:45 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:45 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:49 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:50 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:54 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:55 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:59 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:45:59 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:02 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:04 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:06 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:09 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:10 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:14 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:14 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:18 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:19 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:23 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:23 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:27 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:28 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:30 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:31 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:33 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:35 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:37 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:40 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:41 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:46 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:47 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:50 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:50 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:54 executing program 0:
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:56 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:46:58 executing program 0:
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:00 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:03 executing program 0:
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:04 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:07 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:08 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:12 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:13 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:17 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:18 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:23 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:24 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:28 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:29 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x0, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:33 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x0, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:33 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:37 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:38 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:42 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:42 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:47 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:48 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:52 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:53 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:56 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:47:57 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:00 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:02 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:05 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:07 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:08 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:10 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:12 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:14 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:16 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:18 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:20 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:22 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:26 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:27 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:31 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x0, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:32 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, 0x0, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:36 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:37 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:40 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000240))

00:48:41 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:45 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000240))

00:48:46 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:51 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000240))

00:48:54 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:48:57 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0)

00:48:58 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:01 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0)

00:49:02 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:04 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0)

00:49:07 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x0, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:10 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000240))

00:49:12 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x0, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:15 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x0, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:17 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:19 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:22 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000240))

00:49:24 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x0, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:27 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000240))

00:49:28 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:31 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000240))

00:49:33 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:36 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0)

00:49:37 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:40 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0)

00:49:42 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:45 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0)

00:49:46 executing program 0:
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:50 executing program 1:
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:52 executing program 0:
syz_io_uring_setup(0x3dd5, 0x0, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:54 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:55 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:49:57 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:00 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:02 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:06 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:07 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:10 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:11 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:15 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x0, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:17 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:50:19 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

00:50:21 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:24 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:25 executing program 1:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:28 executing program 0:
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:30 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:33 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:35 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:38 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:40 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10)
read(r6, &(0x7f0000000300)=""/201, 0xc9)

00:50:43 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:45 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$binfmt_script(r0, 0x0, 0x0)

00:50:48 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x40000, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0x4000)
sendfile(r1, r2, &(0x7f0000000480)=0xfffffffffffffff7, 0xfffffffffffffff9)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
close_range(r3, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789, 0x8, 0x1, 0x177}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15, 0x8, 0x3, 0x75, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:50:50 executing program 1:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x620840, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r2}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x8008af26, 0xe9002)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r3, 0x8008af26, 0xe9002)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3)
ftruncate(r1, 0xfffffffffffffc93)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x1a9242, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000080)=0x1)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
read$dsp(r5, &(0x7f0000000280)=""/75, 0xfffffe61)

00:50:55 executing program 0:
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@ipv4={[], [], @local}, 0x20})
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
close_range(r0, r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
dup3(r0, r2, 0x80000)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
openat(r3, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x1d4)

00:51:03 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
signalfd4(r1, &(0x7f0000000000)={[0x4]}, 0x8, 0x0)

00:51:04 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x66a, &(0x7f0000000080)={0x0, 0xd832, 0x0, 0x3, 0x19e, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100))

00:51:07 executing program 1 (fault-call:4 fault-nth:0):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:51:08 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x66a, &(0x7f0000000080)={0x0, 0xd832, 0x0, 0x3, 0x19e, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 3071.590051][ T5933] FAULT_INJECTION: forcing a failure.
[ 3071.590051][ T5933] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3071.595589][ T5933] CPU: 1 PID: 5933 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 3071.596704][ T5933] Hardware name: riscv-virtio,qemu (DT)
[ 3071.597696][ T5933] Call Trace:
[ 3071.598433][ T5933] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 3071.599435][ T5933] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 3071.600396][ T5933] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 3071.601269][ T5933] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 3071.602138][ T5933] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 3071.603140][ T5933] [<ffffffe000a37532>] should_fail_usercopy+0x1e/0x26
[ 3071.604153][ T5933] [<ffffffe000974dc2>] _copy_from_user+0x34/0x110
[ 3071.605069][ T5933] [<ffffffe0004e309c>] io_uring_setup+0x4c/0x1c10
[ 3071.605979][ T5933] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 3071.606909][ T5933] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:51:11 executing program 1 (fault-call:4 fault-nth:1):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

00:51:13 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x66a, &(0x7f0000000080)={0x0, 0xd832, 0x0, 0x3, 0x19e, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 3075.635172][ T5939] FAULT_INJECTION: forcing a failure.
[ 3075.635172][ T5939] name failslab, interval 1, probability 0, space 0, times 0
[ 3075.668408][ T5939] CPU: 0 PID: 5939 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 3075.669737][ T5939] Hardware name: riscv-virtio,qemu (DT)
[ 3075.670539][ T5939] Call Trace:
[ 3075.671204][ T5939] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 3075.672317][ T5939] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 3075.673371][ T5939] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 3075.674368][ T5939] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 3075.675349][ T5939] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 3075.676410][ T5939] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 3075.677488][ T5939] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 3075.679133][ T5939] [<ffffffe0003b8ab0>] kmem_cache_alloc_trace+0x5e/0x2bc
[ 3075.680307][ T5939] [<ffffffe0004e3206>] io_uring_setup+0x1b6/0x1c10
[ 3075.681398][ T5939] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 3075.682498][ T5939] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:51:15 executing program 1 (fault-call:4 fault-nth:2):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

[ 3079.442470][ T5945] FAULT_INJECTION: forcing a failure.
[ 3079.442470][ T5945] name failslab, interval 1, probability 0, space 0, times 0
[ 3079.445697][ T5945] CPU: 0 PID: 5945 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 3079.447558][ T5945] Hardware name: riscv-virtio,qemu (DT)
[ 3079.449007][ T5945] Call Trace:
[ 3079.449908][ T5945] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 3079.451463][ T5945] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 3079.453312][ T5945] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 3079.454696][ T5945] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 3079.456077][ T5945] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 3079.458206][ T5945] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 3079.460331][ T5945] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 3079.461781][ T5945] [<ffffffe0003b8086>] __kmalloc+0x6e/0x332
[ 3079.463239][ T5945] [<ffffffe0004e33ac>] io_uring_setup+0x35c/0x1c10
[ 3079.464244][ T5945] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 3079.465653][ T5945] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:51:18 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x66a, &(0x7f0000000080)={0x0, 0xd832, 0x0, 0x3, 0x19e, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100))

00:51:19 executing program 1 (fault-call:4 fault-nth:3):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

[ 3083.606586][ T5951] FAULT_INJECTION: forcing a failure.
[ 3083.606586][ T5951] name failslab, interval 1, probability 0, space 0, times 0
[ 3083.615899][ T5951] CPU: 1 PID: 5951 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 3083.618414][ T5951] Hardware name: riscv-virtio,qemu (DT)
[ 3083.619946][ T5951] Call Trace:
[ 3083.621216][ T5951] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 3083.622636][ T5951] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 3083.624049][ T5951] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 3083.625347][ T5951] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 3083.626633][ T5951] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 3083.628511][ T5951] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 3083.629802][ T5951] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 3083.631103][ T5951] [<ffffffe0003b8ab0>] kmem_cache_alloc_trace+0x5e/0x2bc
[ 3083.633208][ T5951] [<ffffffe00096c73a>] percpu_ref_init+0x8e/0x220
[ 3083.634567][ T5951] [<ffffffe0004e3414>] io_uring_setup+0x3c4/0x1c10
[ 3083.636076][ T5951] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 3083.638093][ T5951] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:51:22 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x66a, &(0x7f0000000080)={0x0, 0xd832, 0x0, 0x3, 0x19e, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100))

00:51:23 executing program 1 (fault-call:4 fault-nth:4):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
syz_io_uring_setup(0x3dd5, &(0x7f0000000080)={0x0, 0xe789}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x30c0, &(0x7f00000001c0)={0x0, 0x3a15}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240))

[ 3087.863103][ T5957] FAULT_INJECTION: forcing a failure.
[ 3087.863103][ T5957] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 3087.865475][ T5957] CPU: 1 PID: 5957 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 3087.867146][ T5957] Hardware name: riscv-virtio,qemu (DT)
[ 3087.868559][ T5957] Call Trace:
[ 3087.869383][ T5957] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 3087.870940][ T5957] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 3087.872877][ T5957] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 3087.874670][ T5957] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 3087.876079][ T5957] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 3087.878154][ T5957] [<ffffffe00036c530>] should_fail_alloc_page+0x54/0x62
[ 3087.880345][ T5957] [<ffffffe00036f654>] __alloc_pages_nodemask+0xf6/0x480
[ 3087.881815][ T5957] [<ffffffe0003a273c>] alloc_pages_current+0x114/0x234
[ 3087.883254][ T5957] [<ffffffe000366d58>] __get_free_pages+0xe/0x38
[ 3087.885342][ T5957] [<ffffffe0004ceaf0>] io_mem_alloc+0x114/0x180
[ 3087.886644][ T5957] [<ffffffe0004e3894>] io_uring_setup+0x844/0x1c10
[ 3087.888505][ T5957] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 3087.889889][ T5957] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
[ 3087.904547][ T5957] ==================================================================
[ 3087.910317][ T5957] BUG: KASAN: null-ptr-deref in io_commit_cqring+0x3ea/0x8f6
[ 3087.911945][ T5957] Write of size 4 at addr 00000000000000c0 by task syz-executor.1/5957
[ 3087.913356][ T5957] 
[ 3087.914377][ T5957] CPU: 0 PID: 5957 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0
[ 3087.916560][ T5957] Hardware name: riscv-virtio,qemu (DT)
[ 3087.918218][ T5957] Call Trace:
[ 3087.919412][ T5957] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 3087.920850][ T5957] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 3087.922320][ T5957] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 3087.923649][ T5957] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 3087.925019][ T5957] [<ffffffe0003bccfc>] kasan_report+0x146/0x18c
[ 3087.926522][ T5957] [<ffffffe0003bd4e4>] __asan_store4+0x4a/0x80
[ 3087.928639][ T5957] [<ffffffe0004d1950>] io_commit_cqring+0x3ea/0x8f6
[ 3087.930143][ T5957] [<ffffffe0004d3044>] io_kill_timeouts+0x412/0x420
[ 3087.931561][ T5957] [<ffffffe0004e2eea>] io_ring_ctx_wait_and_kill+0x172/0x2a0
[ 3087.933038][ T5957] [<ffffffe0004e3dee>] io_uring_setup+0xd9e/0x1c10
[ 3087.934450][ T5957] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 3087.935893][ T5957] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
[ 3087.937715][ T5957] ==================================================================
[ 3087.939746][ T5957] Disabling lock debugging due to kernel taint
[ 3087.941086][ T5957] Kernel panic - not syncing: panic_on_warn set ...
[ 3087.942384][ T5957] CPU: 0 PID: 5957 Comm: syz-executor.1 Tainted: G    B             5.12.0-rc5-syzkaller #0
[ 3087.943693][ T5957] Hardware name: riscv-virtio,qemu (DT)
[ 3087.944492][ T5957] Call Trace:
[ 3087.945110][ T5957] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 3087.946281][ T5957] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 3087.949975][ T5957] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 3087.953643][ T5957] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 3087.957435][ T5957] [<ffffffe002a5f57a>] panic+0x20a/0x5cc
[ 3087.959815][ T5957] [<ffffffe0003bc7b0>] print_address_description.constprop.0+0x0/0x31e
[ 3087.963612][ T5957] [<ffffffe0003bcd06>] kasan_report+0x150/0x18c
[ 3087.966783][ T5957] [<ffffffe0003bd4e4>] __asan_store4+0x4a/0x80
[ 3087.970411][ T5957] [<ffffffe0004d1950>] io_commit_cqring+0x3ea/0x8f6
[ 3087.972490][ T5957] [<ffffffe0004d3044>] io_kill_timeouts+0x412/0x420
[ 3087.973404][ T5957] [<ffffffe0004e2eea>] io_ring_ctx_wait_and_kill+0x172/0x2a0
[ 3087.974352][ T5957] [<ffffffe0004e3dee>] io_uring_setup+0xd9e/0x1c10
[ 3087.975217][ T5957] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 3087.976129][ T5957] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
[ 3087.977373][ T5957] SMP: stopping secondary CPUs
[ 3087.979524][ T5957] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:39:54  Registers:
info registers vcpu 0
 pc       ffffffe0003bd51a
 mhartid  0000000000000000
 mstatus  00000000000001a0
 mip      0000000000000000
 mie      00000000000002aa
 mideleg  0000000000000222
 medeleg  000000000000b109
 mtvec    0000000080000540
 stvec    ffffffe00000542c
 mepc     ffffffe00000e9d4
 sepc     ffffffe0003be4ba
 mcause   0000000000000009
 scause   8000000000000005
 mtval  0000000000000000
 stval  0000000000000000
 x0/zero 0000000000000000 x1/ra ffffffe0000d38d4 x2/sp ffffffe00a4a3a50 x3/gp ffffffe004588b08
 x4/tp ffffffe00eae0000 x5/t0 ffffffe00a4a3b78 x6/t1 ffffffc40149474c x7/t2 000000006cd93abb
 x8/s0 ffffffe00a4a3a20 x9/s1 0000000000000000 x10/a0 ffffffe00a4a3a3c x11/a1 0000000000000007
 x12/a2 0000000000000002 x13/a3 ffffffe00097b900 x14/a4 0000000000000003 x15/a5 000000000ce3acf2
 x16/a6 0000000000f00000 x17/a7 000000004968a33e x18/s2 00000000456ca8ca x19/s3 ffffffffe423869f
 x20/s4 000000006c03a587 x21/s5 ffffffffc46e2985 x22/s6 0000000061cce06e x23/s7 0000000047a30e88
 x24/s8 ffffffe00c9e4850 x25/s9 ffffffe009731e00 x26/s10 0000000000000000 x27/s11 ffffffe00c9e4848
 x28/t3 0000000000000008 x29/t4 ffffffc40149476a x30/t5 ffffffc40149476c x31/t6 00000000000000f8
 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000
 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000
 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000
 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000
 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000
 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000
 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000
info registers vcpu 1
 pc       ffffffe000c1b69e
 mhartid  0000000000000001
 mstatus  00000000000000a0
 mip      00000000000000a0
 mie      000000000000022a
 mideleg  0000000000000222
 medeleg  000000000000b109
 mtvec    0000000080000540
 stvec    ffffffe00000542c
 mepc     ffffffe0003bd41a
 sepc     ffffffe002a9b352
 mcause   8000000000000007
 scause   8000000000000005
 mtval  0000000000000000
 stval  0000000000000000
 x0/zero 0000000000000000 x1/ra ffffffe000c1b69e x2/sp ffffffe00d09f750 x3/gp ffffffe004588b08
 x4/tp ffffffe007025f00 x5/t0 ffffffe004ffdbb7 x6/t1 0000000000000001 x7/t2 0000000000000000
 x8/s0 ffffffe00d09f780 x9/s1 ffffffe005230480 x10/a0 ffffffe0052304c8 x11/a1 ffffffd000633000
 x12/a2 1ffffffc00a46099 x13/a3 ffffffe000c1b69e x14/a4 0000000000000000 x15/a5 ffffffe0052304c8
 x16/a6 0000000000f00000 x17/a7 ffffffe000c240d4 x18/s2 ffffffd000633000 x19/s3 0000000000000037
 x20/s4 0000000000000061 x21/s5 ffffffe000c1a8f8 x22/s6 ffffffe005230480 x23/s7 ffffffe0052304d8
 x24/s8 0000000000000001 x25/s9 ffffffe00458c0d0 x26/s10 ffffffe005230708 x27/s11 ffffffe0052304d0
 x28/t3 2a748637d4a9c500 x29/t4 ffffffc4009ffb74 x30/t5 ffffffc4009ffb77 x31/t6 ffffffe004ffdbb7
 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000
 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000
 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000
 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000
 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000
 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000
 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000