fffffffffffff, 0xc01464ba, &(0x7f00000002c0)={0xffffffffffff0bc1, r9, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000180)={0x0, r6, 0x25, 0x64, 0x1b, 0x8, 0x6, 0x4, 0x6}) (rerun: 64) 23:13:26 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@local, @broadcast, 0x0, "076415ffbe2c72e6bc0b78186d4335042b841600000000000000000000ef00"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x40, 0x2, 0x10}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0fd4f2baf80c66b8f0b2898566efbafc0c66b82100000066ef0f350f794b62650f200266b9ba0a00000f3266b9800000c00f326635002000000f3066b9c902000066b80a00000066ba000000000f30f3dacb47", 0x53}], 0x1, 0x20, &(0x7f00000000c0), 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0fd4f2baf80c66b8f0b2898566efbafc0c66b82100000066ef0f350f794b62650f200266b9ba0a00000f3266b9800000c00f326635002000000f3066b9c902000066b80a00000066ba000000000f30f3dacb47", 0x53}], 0x1, 0x20, &(0x7f00000000c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x16e0b278adb1fd78}, 0x800) 23:13:26 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@local, @broadcast, 0x0, "076415ffbe2c72e6bc0b78186d4335042b841600000000000000000000ef00"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r3, r4, r5], 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x3000}) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async, rerun: 64) r0 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x1, "e3479735d2642d40ae93df2ce9c72251435829867e8db95b1bb799ad310cf3b6", 0x10001, 0x1, 0x81, 0x2008}, 0x3c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000440)) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffce8b}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x38}}, 0x4001) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f0000000480)={@mcast1, @mcast2}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r7 = openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x400000, 0x0) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f00000002c0)={0xffffffffffff0bc1, r9, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000180)={0x0, r6, 0x25, 0x64, 0x1b, 0x8, 0x6, 0x4, 0x6}) (rerun: 64) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13ebb8566e0dbc0b78186d4335042b841600"}, 0x3c) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0x7f, 0x2, 0x20, 0xfff7, 0x13, "d413408f7a0c6b46"}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) write$nbd(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="67446698000000000100030004000000c1a5ee02b11962619d53ed97cbd28d7d2b0084988162e19879ad6dde12a5d1c6f299f08d901edfacd94cc822c0e7be1cc81d023b2bde053a27c4fc6bd975583b252a3eb9db72d961c1b08362178802c3d738d05e81a9b499bb3842a8db3db8b838a8d5fb5c5e0062f510b4740258fc207c7aa367f1a3b3a784bafb0ddaf0b8b605bf3fe52fe2188b22e5c7e4da2340a405e40912b229da18784d8541698b49944805c7f354b37ccc08ab711828621222aebc429e59562ca592d2b62319e105e1e70ae268b944964bf8bca93c7922bff062bc14760fceecf6f1aca9bd20f569d256ea2cd3d62055ac80b179bed023e69af9d2898a115cff00d084d669007afb897fabdbe07b8390d0c31d79f9c6fcdbed90fe606a5a80112711a17c17f4889add9582531faff4ef9df00e73d524c74044465ddb2f023b827334ebb601635e5211"], 0x10c) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={@broadcast, @local}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000040)={0xffff}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffd000/0x3000)=nil) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@loopback, @dev={0xac, 0x14, 0x14, 0x16}, 0xffffffffffffffff, "861b7353b6a4685c95eb40fd414da73f025db8dd1f718fca63413d1892ef056d", 0x7fff, 0x2, 0xffffbfff, 0xe4b5}, 0x3c) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x8000, @vifc_lcl_ifindex=r5, @loopback}, 0x10) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x81, 0x3, @vifc_lcl_ifindex=r5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x9, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x490880, 0x48) mmap$xdp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3000001, 0x10, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0xa, 0x480a8a84ab539498, 0xffffffffffffffff, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x64) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) syz_io_uring_setup(0x5bc4, &(0x7f0000000100)={0x0, 0xc954, 0x80, 0x2, 0x1d, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000040)="5e4a42c30d07f9ff6a73fd1b9237880574d4ed7932fd94091a3c43f2ad8e63925c04842343100d92365afbc5d7b14b49974f97928b24", 0x36}, 0x64) 23:13:26 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13ebb8566e0dbc0b78186d4335042b841600"}, 0x3c) (async) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0x7f, 0x2, 0x20, 0xfff7, 0x13, "d413408f7a0c6b46"}) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) write$nbd(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x10c) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={@broadcast, @local}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000040)={0xffff}) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffd000/0x3000)=nil) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@loopback, @dev={0xac, 0x14, 0x14, 0x16}, 0xffffffffffffffff, "861b7353b6a4685c95eb40fd414da73f025db8dd1f718fca63413d1892ef056d", 0x7fff, 0x2, 0xffffbfff, 0xe4b5}, 0x3c) (async) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x8000, @vifc_lcl_ifindex=r5, @loopback}, 0x10) (async) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x81, 0x3, @vifc_lcl_ifindex=r5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x9, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x490880, 0x48) mmap$xdp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3000001, 0x10, r0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0xa, 0x480a8a84ab539498, 0xffffffffffffffff, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x64) (async, rerun: 32) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) ioctl$TCSETAF(r1, 0x5408, 0x0) syz_io_uring_setup(0x5bc4, &(0x7f0000000100)={0x0, 0xc954, 0x80, 0x2, 0x1d, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000040)="5e4a42c30d07f9ff6a73fd1b9237880574d4ed7932fd94091a3c43f2ad8e63925c04842343100d92365afbc5d7b14b49974f97928b24", 0x36}, 0x64) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x4, "0764836fd23f7fffbe006d4335042b8416000000000000f4ffff0f0300db00", 0x20000a}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x1000000, 0x810, r0, 0x82000000) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) ioctl$TCSETAF(r1, 0x5408, 0x0) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) 23:13:26 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x4, "0764836fd23f7fffbe006d4335042b8416000000000000f4ffff0f0300db00", 0x20000a}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async, rerun: 32) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 64) mmap$snddsp_status(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x1000000, 0x810, r0, 0x82000000) (rerun: 64) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) (async, rerun: 64) ioctl$TCSETAF(r1, 0x5408, 0x0) (async, rerun: 64) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x9, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x490880, 0x48) mmap$xdp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3000001, 0x10, r0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0xa, 0x480a8a84ab539498, 0xffffffffffffffff, 0x8000000) (async) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x64) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) syz_io_uring_setup(0x5bc4, &(0x7f0000000100)={0x0, 0xc954, 0x80, 0x2, 0x1d, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000040)="5e4a42c30d07f9ff6a73fd1b9237880574d4ed7932fd94091a3c43f2ad8e63925c04842343100d92365afbc5d7b14b49974f97928b24", 0x36}, 0x64) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13ebb8566e0dbc0b78186d4335042b841600"}, 0x3c) (async) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0x7f, 0x2, 0x20, 0xfff7, 0x13, "d413408f7a0c6b46"}) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) write$nbd(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x10c) (async, rerun: 32) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={@broadcast, @local}) (rerun: 32) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000040)={0xffff}) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffd000/0x3000)=nil) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async, rerun: 64) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@loopback, @dev={0xac, 0x14, 0x14, 0x16}, 0xffffffffffffffff, "861b7353b6a4685c95eb40fd414da73f025db8dd1f718fca63413d1892ef056d", 0x7fff, 0x2, 0xffffbfff, 0xe4b5}, 0x3c) (async, rerun: 64) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x8000, @vifc_lcl_ifindex=r5, @loopback}, 0x10) (async) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x81, 0x3, @vifc_lcl_ifindex=r5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 23:13:26 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff9000/0x4000)=nil) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="1066a85579d7b2548777fe6e1caa3a5c375f6bbc3226531e8e9688ee3d14ca0f9092ffa305c696ed242e41c581076e1a875687b5aa60a0370d08bb3bff929f8d56389440a5b0868daf09232c12568df14109bb48150b0e5e733528befb312fc1aef099d0f28133890e5231bb20f73301b97f496153f6", 0x76, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r2, r4, r6, 0x0, r7], 0x5, 0x400}) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000000c0)={@local, @dev={0xac, 0x14, 0x14, 0x27}, 0x1, "9af9b39290eb9b23db4e27b3ec094e91384bef15580d78332514f11e1df50741", 0x6, 0x1a4, 0xfff, 0x2053}, 0x3c) r8 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, 0x0) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000300)=0x29d0) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x4, "0764836fd23f7fffbe006d4335042b8416000000000000f4ffff0f0300db00", 0x20000a}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x1000000, 0x810, r0, 0x82000000) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff9000/0x4000)=nil) (async) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="1066a85579d7b2548777fe6e1caa3a5c375f6bbc3226531e8e9688ee3d14ca0f9092ffa305c696ed242e41c581076e1a875687b5aa60a0370d08bb3bff929f8d56389440a5b0868daf09232c12568df14109bb48150b0e5e733528befb312fc1aef099d0f28133890e5231bb20f73301b97f496153f6", 0x76, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r2, r4, r6, 0x0, r7], 0x5, 0x400}) (async, rerun: 32) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000000c0)={@local, @dev={0xac, 0x14, 0x14, 0x27}, 0x1, "9af9b39290eb9b23db4e27b3ec094e91384bef15580d78332514f11e1df50741", 0x6, 0x1a4, 0xfff, 0x2053}, 0x3c) (async, rerun: 32) r8 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, 0x0) (async) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000300)=0x29d0) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) (async) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff9000/0x4000)=nil) (async) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="1066a85579d7b2548777fe6e1caa3a5c375f6bbc3226531e8e9688ee3d14ca0f9092ffa305c696ed242e41c581076e1a875687b5aa60a0370d08bb3bff929f8d56389440a5b0868daf09232c12568df14109bb48150b0e5e733528befb312fc1aef099d0f28133890e5231bb20f73301b97f496153f6", 0x76, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r2, r4, r6, 0x0, r7], 0x5, 0x400}) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000000c0)={@local, @dev={0xac, 0x14, 0x14, 0x27}, 0x1, "9af9b39290eb9b23db4e27b3ec094e91384bef15580d78332514f11e1df50741", 0x6, 0x1a4, 0xfff, 0x2053}, 0x3c) r8 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, 0x0) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000300)=0x29d0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$TCXONC(r1, 0x540a, 0x3) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000180)="1066a85579d7b2548777fe6e1caa3a5c375f6bbc3226531e8e9688ee3d14ca0f9092ffa305c696ed242e41c581076e1a875687b5aa60a0370d08bb3bff929f8d56389440a5b0868daf09232c12568df14109bb48150b0e5e733528befb312fc1aef099d0f28133890e5231bb20f73301b97f496153f6", 0x76}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r2, r4, r6, 0x0, r7], 0x5, 0x400}) (async) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000000c0)={@local, @dev={0xac, 0x14, 0x14, 0x27}, 0x1, "9af9b39290eb9b23db4e27b3ec094e91384bef15580d78332514f11e1df50741", 0x6, 0x1a4, 0xfff, 0x2053}, 0x3c) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r8, 0x5408, 0x0) (async) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000300)=0x29d0) (async) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @multicast2, 0xfffe, "2ffba8566e0d6dffc58304c8000018000000000800", 0xfffffffe, 0x100, 0x1, 0xb5}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000000000)="a55a51a274e1c7cc16cb5a88456d1fcefb157dcc2474215bec4462d0e3c8039c4ca034f2bc4f42bd3c13f926c6cff1317a56515d1aca0d48a2600219fdd5327f45ef0e8806cb7e28512944c3eea16ac7ffcd522ddeed7918639efa06e6a9f905933a04032b2c34f9619637edca2cd27e60e9a687fc545313184ccba7b0bb6f658893af5f9a78595a816f6d7ae7fe49bfd5b52d72cc592afca89c2f408c704c62981e6bd0a03e71c23569ed035d7ffd07c0422c75401e98dff323be09f4846b655ea808966e7dd50948c56d486c643467514f83b9fed01bce54550ee73f03eecce712f9460de0e91f935b5ccac7f0f60d0fcfb50e9037", 0xf6}, 0x64) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 23:13:26 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @private=0xa010103, 0xffffffffffffffff, "0764836fd23f7fffbe2c72e60e13152febb8566e48b08a5eee0c3560042b8416", 0x8, 0xffffe, 0x12800000, 0xffffffff}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @multicast2, 0xfffe, "2ffba8566e0d6dffc58304c8000018000000000800", 0xfffffffe, 0x100, 0x1, 0xb5}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000000000)="a55a51a274e1c7cc16cb5a88456d1fcefb157dcc2474215bec4462d0e3c8039c4ca034f2bc4f42bd3c13f926c6cff1317a56515d1aca0d48a2600219fdd5327f45ef0e8806cb7e28512944c3eea16ac7ffcd522ddeed7918639efa06e6a9f905933a04032b2c34f9619637edca2cd27e60e9a687fc545313184ccba7b0bb6f658893af5f9a78595a816f6d7ae7fe49bfd5b52d72cc592afca89c2f408c704c62981e6bd0a03e71c23569ed035d7ffd07c0422c75401e98dff323be09f4846b655ea808966e7dd50948c56d486c643467514f83b9fed01bce54550ee73f03eecce712f9460de0e91f935b5ccac7f0f60d0fcfb50e9037", 0xf6}, 0x64) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000000000)="a55a51a274e1c7cc16cb5a88456d1fcefb157dcc2474215bec4462d0e3c8039c4ca034f2bc4f42bd3c13f926c6cff1317a56515d1aca0d48a2600219fdd5327f45ef0e8806cb7e28512944c3eea16ac7ffcd522ddeed7918639efa06e6a9f905933a04032b2c34f9619637edca2cd27e60e9a687fc545313184ccba7b0bb6f658893af5f9a78595a816f6d7ae7fe49bfd5b52d72cc592afca89c2f408c704c62981e6bd0a03e71c23569ed035d7ffd07c0422c75401e98dff323be09f4846b655ea808966e7dd50948c56d486c643467514f83b9fed01bce54550ee73f03eecce712f9460de0e91f935b5ccac7f0f60d0fcfb50e9037", 0xf6}, 0x64) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 32) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (rerun: 32) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @multicast2, 0xfffe, "2ffba8566e0d6dffc58304c8000018000000000800", 0xfffffffe, 0x100, 0x1, 0xb5}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @private=0xa010103, 0xffffffffffffffff, "0764836fd23f7fffbe2c72e60e13152febb8566e48b08a5eee0c3560042b8416", 0x8, 0xffffe, 0x12800000, 0xffffffff}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000000000)="a55a51a274e1c7cc16cb5a88456d1fcefb157dcc2474215bec4462d0e3c8039c4ca034f2bc4f42bd3c13f926c6cff1317a56515d1aca0d48a2600219fdd5327f45ef0e8806cb7e28512944c3eea16ac7ffcd522ddeed7918639efa06e6a9f905933a04032b2c34f9619637edca2cd27e60e9a687fc545313184ccba7b0bb6f658893af5f9a78595a816f6d7ae7fe49bfd5b52d72cc592afca89c2f408c704c62981e6bd0a03e71c23569ed035d7ffd07c0422c75401e98dff323be09f4846b655ea808966e7dd50948c56d486c643467514f83b9fed01bce54550ee73f03eecce712f9460de0e91f935b5ccac7f0f60d0fcfb50e9037", 0xf6}, 0x64) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000000000)="a55a51a274e1c7cc16cb5a88456d1fcefb157dcc2474215bec4462d0e3c8039c4ca034f2bc4f42bd3c13f926c6cff1317a56515d1aca0d48a2600219fdd5327f45ef0e8806cb7e28512944c3eea16ac7ffcd522ddeed7918639efa06e6a9f905933a04032b2c34f9619637edca2cd27e60e9a687fc545313184ccba7b0bb6f658893af5f9a78595a816f6d7ae7fe49bfd5b52d72cc592afca89c2f408c704c62981e6bd0a03e71c23569ed035d7ffd07c0422c75401e98dff323be09f4846b655ea808966e7dd50948c56d486c643467514f83b9fed01bce54550ee73f03eecce712f9460de0e91f935b5ccac7f0f60d0fcfb50e9037", 0xf6}, 0x64) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @rand_addr=0x640100fe, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x4}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) 23:13:26 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @private=0xa010103, 0xffffffffffffffff, "0764836fd23f7fffbe2c72e60e13152febb8566e48b08a5eee0c3560042b8416", 0x8, 0xffffe, 0x12800000, 0xffffffff}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @private=0xa010103, 0xffffffffffffffff, "0764836fd23f7fffbe2c72e60e13152febb8566e48b08a5eee0c3560042b8416", 0x8, 0xffffe, 0x12800000, 0xffffffff}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff9000/0x4000)=nil) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @rand_addr=0x640100fe, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x4}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfd, 0x4100) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000000240)="fe5e0b454a0c573bb79b316caaf50a38f577e50d266547c5dc695a0837ec656badf3103b98181f8c19caa4783384362bdb7c6cafe8f299a41c3d3429aaec9badffbfb4dc1b5e014ad71e76859c0c40e1ef527bb53e071eb89cb8fb2e830a633b7abb62ef576f1e0807df89e9", 0x6c, r0}, 0x64) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x2, 0x420201) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000340)={0x0, 0x0, r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[r5], 0x1, 0x80800}) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x1}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff9000/0x4000)=nil) 23:13:26 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfd, 0x4100) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000000240)="fe5e0b454a0c573bb79b316caaf50a38f577e50d266547c5dc695a0837ec656badf3103b98181f8c19caa4783384362bdb7c6cafe8f299a41c3d3429aaec9badffbfb4dc1b5e014ad71e76859c0c40e1ef527bb53e071eb89cb8fb2e830a633b7abb62ef576f1e0807df89e9", 0x6c, r0}, 0x64) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x2, 0x420201) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) (async) ioctl$TCSETAF(r3, 0x5408, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000340)={0x0, 0x0, r3}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[r5], 0x1, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[r5], 0x1, 0x80800}) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @rand_addr=0x640100fe, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x4}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff9000/0x4000)=nil) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x1}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfd, 0x4100) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0x8001) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000000240)="fe5e0b454a0c573bb79b316caaf50a38f577e50d266547c5dc695a0837ec656badf3103b98181f8c19caa4783384362bdb7c6cafe8f299a41c3d3429aaec9badffbfb4dc1b5e014ad71e76859c0c40e1ef527bb53e071eb89cb8fb2e830a633b7abb62ef576f1e0807df89e9", 0x6c, r0}, 0x64) (async) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x2, 0x420201) (async) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000340)={0x0, 0x0, r3}) (rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[r5], 0x1, 0x80800}) (rerun: 32) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x2, &(0x7f0000ffc000/0x3000)=nil) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x1}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000001c0)={@broadcast, @multicast2, 0x0, "55661c49a6b1c7cbac619c3806e13a385621ac6c5560a0f338bb17ffbfaeb624", 0x9, 0x2, 0x8, 0x5}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x3, 0x3, 0x8}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000100)={0x2, r5, 0x7, 0x30ee46a9, 0x3c, 0x80, 0xffffc610}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x3, 0x2, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r11}) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r12, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2, 0xa, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000280)=[r8, 0x0, r5, r9, r11, r13, r5, r6, 0x0], 0x9, r14, r6, 0x6, 0x6, 0x443c, 0x6, {0xfff, 0xc9c, 0xff81, 0x4, 0x8001, 0x3, 0x6, 0x240, 0x6, 0x9, 0x401, 0x1f, 0x0, 0x8, "7618e26cc1fe395dd2ec60a08672684a56f097347d2097e8218edeaacebf2f68"}}) 23:13:26 executing program 1: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x620100, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)) syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0xdf3b, 0x8, 0x3, 0x3e0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x3bd843) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x2, &(0x7f0000ffc000/0x3000)=nil) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/234, 0xea, 0x1, &(0x7f0000000140)=""/170, 0xaa}, &(0x7f0000000380)=0x40) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x4, &(0x7f00000000c0)={0x8, "015de8aec872b494fa70e7a436aa16e997be9f02fc7eb2813bf814156d0c40b67f"}}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) socketpair(0x9, 0x80000, 0x5, &(0x7f0000000040)) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000001c0)={@broadcast, @multicast2, 0x0, "55661c49a6b1c7cbac619c3806e13a385621ac6c5560a0f338bb17ffbfaeb624", 0x9, 0x2, 0x8, 0x5}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x3, 0x3, 0x8}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000100)={0x2, r5, 0x7, 0x30ee46a9, 0x3c, 0x80, 0xffffc610}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x3, 0x2, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r11}) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r12, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r13}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2, 0xa, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000280)=[r8, 0x0, r5, r9, r11, r13, r5, r6, 0x0], 0x9, r14, r6, 0x6, 0x6, 0x443c, 0x6, {0xfff, 0xc9c, 0xff81, 0x4, 0x8001, 0x3, 0x6, 0x240, 0x6, 0x9, 0x401, 0x1f, 0x0, 0x8, "7618e26cc1fe395dd2ec60a08672684a56f097347d2097e8218edeaacebf2f68"}}) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/234, 0xea, 0x1, &(0x7f0000000140)=""/170, 0xaa}, &(0x7f0000000380)=0x40) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x4, &(0x7f00000000c0)={0x8, "015de8aec872b494fa70e7a436aa16e997be9f02fc7eb2813bf814156d0c40b67f"}}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) socketpair(0x9, 0x80000, 0x5, &(0x7f0000000040)) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/234, 0xea, 0x1, &(0x7f0000000140)=""/170, 0xaa}, &(0x7f0000000380)=0x40) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x4, &(0x7f00000000c0)={0x8, "015de8aec872b494fa70e7a436aa16e997be9f02fc7eb2813bf814156d0c40b67f"}}) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) socketpair(0x9, 0x80000, 0x5, &(0x7f0000000040)) (async) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x2, &(0x7f0000ffc000/0x3000)=nil) 23:13:26 executing program 1: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x620100, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)) (async) syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0xdf3b, 0x8, 0x3, 0x3e0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x3bd843) 23:13:26 executing program 1: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x620100, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)) syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0xdf3b, 0x8, 0x3, 0x3e0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x3bd843) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x620100, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)) (async) syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0xdf3b, 0x8, 0x3, 0x3e0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x3bd843) (async) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x0) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/234, 0xea, 0x1, &(0x7f0000000140)=""/170, 0xaa}, &(0x7f0000000380)=0x40) (async, rerun: 32) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 32) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x4, &(0x7f00000000c0)={0x8, "015de8aec872b494fa70e7a436aa16e997be9f02fc7eb2813bf814156d0c40b67f"}}) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) socketpair(0x9, 0x80000, 0x5, &(0x7f0000000040)) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000001c0)={@broadcast, @multicast2, 0x0, "55661c49a6b1c7cbac619c3806e13a385621ac6c5560a0f338bb17ffbfaeb624", 0x9, 0x2, 0x8, 0x5}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x3, 0x3, 0x8}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000100)={0x2, r5, 0x7, 0x30ee46a9, 0x3c, 0x80, 0xffffc610}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x3, 0x2, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r11}) (async) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r12, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r13}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2, 0xa, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000280)=[r8, 0x0, r5, r9, r11, r13, r5, r6, 0x0], 0x9, r14, r6, 0x6, 0x6, 0x443c, 0x6, {0xfff, 0xc9c, 0xff81, 0x4, 0x8001, 0x3, 0x6, 0x240, 0x6, 0x9, 0x401, 0x1f, 0x0, 0x8, "7618e26cc1fe395dd2ec60a08672684a56f097347d2097e8218edeaacebf2f68"}}) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ffe000/0x1000)=nil) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x0) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x2) 23:13:26 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000100)) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x9) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x401}, 0x3c) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x0) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff9000/0x4000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x3a273870d60c629d, r0, 0x9a62e000) 23:13:26 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000100)) (async) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0x9) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x401}, 0x3c) (async) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x2}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@rand_addr=0x64010100, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x8000}, 0x3c) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000280), 0x2000, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r5, 0x30b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0xb02, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x49}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2800000}]}, 0x5c}, 0x1, 0x0, 0x0, 0xdabd24d09cd17384}, 0x8000) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff9000/0x4000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x3a273870d60c629d, r0, 0x9a62e000) 23:13:26 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000100)) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x9) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x401}, 0x3c) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000100)) (async) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0x9) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x401}, 0x3c) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x2) 23:13:26 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x2}) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@rand_addr=0x64010100, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x8000}, 0x3c) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000280), 0x2000, 0x9) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r5, 0x30b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0xb02, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x49}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2800000}]}, 0x5c}, 0x1, 0x0, 0x0, 0xdabd24d09cd17384}, 0x8000) (async, rerun: 32) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff9000/0x4000)=nil) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x3a273870d60c629d, r0, 0x9a62e000) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x2}) (async, rerun: 64) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@rand_addr=0x64010100, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x8000}, 0x3c) (rerun: 64) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000280), 0x2000, 0x9) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r5, 0x30b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0xb02, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x49}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2800000}]}, 0x5c}, 0x1, 0x0, 0x0, 0xdabd24d09cd17384}, 0x8000) (async, rerun: 32) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff0000/0x10000)=nil, 0x10000}, 0x7}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000080)={0x20, r1, 0x4, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}]}) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f152febd3566e0dbc0b78186d4335042b841600"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x2) syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x2) (async) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff0000/0x10000)=nil, 0x10000}, 0x7}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000080)={0x20, r1, 0x4, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}]}) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f152febd3566e0dbc0b78186d4335042b841600"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f152febd3566e0dbc0b78186d4335042b841600"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f152febd3566e0dbc0b78186d4335042b841600"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @rand_addr=0x64010102, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d433504198416", 0x6, 0x10000, 0x1000000, 0x80000}, 0x3c) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff0000/0x10000)=nil, 0x10000}, 0x7}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000080)={0x20, r1, 0x4, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}]}) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @rand_addr=0x64010102, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d433504198416", 0x6, 0x10000, 0x1000000, 0x80000}, 0x3c) (async, rerun: 32) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) (rerun: 32) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "9572e64e13152fc9b856482212d5788016000000f700", 0x0, 0xffff}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000040)={0x0, 0x8000, 0x3, 0x1055, 0x2, [], [0xe8ee, 0x7, 0x40, 0x1], [0xfffffffa, 0xa64, 0x2, 0x3], [0x3, 0x3ca33d84, 0x4, 0x18]}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x95}) 23:13:26 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000240)={0x100, 0x5, &(0x7f00000000c0)=[r2, 0x0, r3, 0x0, r5], &(0x7f0000000100)=[0x0, 0x7, 0x5f484547], &(0x7f00000001c0)=[0x0, r6, r8, 0x0], &(0x7f0000000200)=[0x401, 0x9], 0x0, 0x5}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:26 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "9572e64e13152fc9b856482212d5788016000000f700", 0x0, 0xffff}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @rand_addr=0x64010102, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d433504198416", 0x6, 0x10000, 0x1000000, 0x80000}, 0x3c) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000240)={0x100, 0x5, &(0x7f00000000c0)=[r2, 0x0, r3, 0x0, r5], &(0x7f0000000100)=[0x0, 0x7, 0x5f484547], &(0x7f00000001c0)=[0x0, r6, r8, 0x0], &(0x7f0000000200)=[0x401, 0x9], 0x0, 0x5}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000240)={0x100, 0x5, &(0x7f00000000c0)=[r2, 0x0, r3, 0x0, r5], &(0x7f0000000100)=[0x0, 0x7, 0x5f484547], &(0x7f00000001c0)=[0x0, r6, r8, 0x0], &(0x7f0000000200)=[0x401, 0x9], 0x0, 0x5}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) 23:13:26 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000040)={0x0, 0x8000, 0x3, 0x1055, 0x2, [], [0xe8ee, 0x7, 0x40, 0x1], [0xfffffffa, 0xa64, 0x2, 0x3], [0x3, 0x3ca33d84, 0x4, 0x18]}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x95}) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) 23:13:26 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "9572e64e13152fc9b856482212d5788016000000f700", 0x0, 0xffff}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000240)={0x100, 0x5, &(0x7f00000000c0)=[r2, 0x0, r3, 0x0, r5], &(0x7f0000000100)=[0x0, 0x7, 0x5f484547], &(0x7f00000001c0)=[0x0, r6, r8, 0x0], &(0x7f0000000200)=[0x401, 0x9], 0x0, 0x5}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000240)={0x100, 0x5, &(0x7f00000000c0)=[r2, 0x0, r3, 0x0, r5], &(0x7f0000000100)=[0x0, 0x7, 0x5f484547], &(0x7f00000001c0)=[0x0, r6, r8, 0x0], &(0x7f0000000200)=[0x401, 0x9], 0x0, 0x5}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) 23:13:26 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000040)={0x0, 0x8000, 0x3, 0x1055, 0x2, [], [0xe8ee, 0x7, 0x40, 0x1], [0xfffffffa, 0xa64, 0x2, 0x3], [0x3, 0x3ca33d84, 0x4, 0x18]}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x95}) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x2000, "0764836fd23f7fffbe0b78386d433a042b841600000100"}, 0x3c) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000009, 0x1010, r2, 0xfffffe01) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000300)={@empty, @broadcast, 0xffffffffffffffff, "35098dfbc680dd83afafb19636de665f10c7705fa6cc6b9b90c8c82d41aabca6", 0xad68, 0x8, 0x7, 0x9}, 0x3c) openat$iommufd(0xffffff9c, &(0x7f0000000340), 0x200, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xddd3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40084) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x6, 0x5, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x80010, 0xffffffffffffffff, 0x7820000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000200)=[0x1000, 0xffff, 0xfff8, 0xf022, 0x1000, 0x0, 0xffff, 0x800], &(0x7f0000000240)=[0x0, 0xff, 0x1, 0x1, 0x5, 0x1000, 0x8, 0x5, 0x0, 0xfff], &(0x7f0000000280)=[0x5c3, 0xa037, 0x5, 0x6, 0x9, 0x8000]}) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff9000/0x2000)=nil) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x2000, "0764836fd23f7fffbe0b78386d433a042b841600000100"}, 0x3c) (async, rerun: 64) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000009, 0x1010, r2, 0xfffffe01) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000300)={@empty, @broadcast, 0xffffffffffffffff, "35098dfbc680dd83afafb19636de665f10c7705fa6cc6b9b90c8c82d41aabca6", 0xad68, 0x8, 0x7, 0x9}, 0x3c) (async) openat$iommufd(0xffffff9c, &(0x7f0000000340), 0x200, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xddd3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40084) (async, rerun: 32) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x6, 0x5, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x80010, 0xffffffffffffffff, 0x7820000) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000200)=[0x1000, 0xffff, 0xfff8, 0xf022, 0x1000, 0x0, 0xffff, 0x800], &(0x7f0000000240)=[0x0, 0xff, 0x1, 0x1, 0x5, 0x1000, 0x8, 0x5, 0x0, 0xfff], &(0x7f0000000280)=[0x5c3, 0xa037, 0x5, 0x6, 0x9, 0x8000]}) 23:13:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x420101) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x1010, r0, 0x2) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x109000) io_uring_setup(0x2148, &(0x7f0000000100)={0x0, 0xdd74, 0x2, 0x3, 0x84}) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000001c0)) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4004b100, &(0x7f0000000180)={0x18, 0x0, {0x4, @random="50cacdf5007c", 'ip6gre0\x00'}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff9000/0x2000)=nil) 23:13:26 executing program 0: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000180)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x8000}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x400, 0x0, 0xffffffffffffffff}) write$tcp_congestion(r1, &(0x7f0000000140)='lp\x00', 0x3) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x3, 0x20, 0x23, 0xfe00, 0x0, "7b1419df5b6fecc2"}) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff9000/0x2000)=nil) 23:13:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x420101) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x1010, r0, 0x2) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x109000) io_uring_setup(0x2148, &(0x7f0000000100)={0x0, 0xdd74, 0x2, 0x3, 0x84}) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000001c0)) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4004b100, &(0x7f0000000180)={0x18, 0x0, {0x4, @random="50cacdf5007c", 'ip6gre0\x00'}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x420101) (async) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x1010, r0, 0x2) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x109000) (async) io_uring_setup(0x2148, &(0x7f0000000100)={0x0, 0xdd74, 0x2, 0x3, 0x84}) (async) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000001c0)) (async) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPOEIOCSFWD(r1, 0x4004b100, &(0x7f0000000180)={0x18, 0x0, {0x4, @random="50cacdf5007c", 'ip6gre0\x00'}}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) 23:13:26 executing program 0: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000180)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x8000}, 0x3c) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x400, 0x0, 0xffffffffffffffff}) write$tcp_congestion(r1, &(0x7f0000000140)='lp\x00', 0x3) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x3, 0x20, 0x23, 0xfe00, 0x0, "7b1419df5b6fecc2"}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="015620616faaaa5c85cf3de2d5da80436d1143c80d27e7d386ad58e8a92364dc7aac66b90159add4bb54ec06d3e8e60000000000000073a08fa363642b999e9ad63ccc98f8086ccc80c3bbf45943f6089b1e968e1b65efb8f66cedc2e3bc8387537f47439ec90d1c759b5516b5eb180ca7eb0952f0e40749d06ea07a48e877d99ee96a56ecbc11456b7c45cbfb27de81343074b7915e1f6b787bdb558c9640f44c2a92e3c9a08e773f9a158ed81d7624bb3d0d9ca6a0136fb5758d1bf80911911f09e586e760aec53ab260eb8dcee3140a5343bcfc23504deb6296c3049a91559506ec9068e10000000000", @ANYRES16=r2, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="008d1b87d700fedbdf250700000008801700", @ANYRES32=r4, @ANYBLOB="06001a004e2300000800110001000000050006feffffffffffffff0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x44094) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)) ioctl$TCSETAF(r5, 0x5408, 0x0) connect$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x404, 0x10000}, 0x20) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x2000, "0764836fd23f7fffbe0b78386d433a042b841600000100"}, 0x3c) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000009, 0x1010, r2, 0xfffffe01) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000300)={@empty, @broadcast, 0xffffffffffffffff, "35098dfbc680dd83afafb19636de665f10c7705fa6cc6b9b90c8c82d41aabca6", 0xad68, 0x8, 0x7, 0x9}, 0x3c) openat$iommufd(0xffffff9c, &(0x7f0000000340), 0x200, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xddd3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40084) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x6, 0x5, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x80010, 0xffffffffffffffff, 0x7820000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000200)=[0x1000, 0xffff, 0xfff8, 0xf022, 0x1000, 0x0, 0xffff, 0x800], &(0x7f0000000240)=[0x0, 0xff, 0x1, 0x1, 0x5, 0x1000, 0x8, 0x5, 0x0, 0xfff], &(0x7f0000000280)=[0x5c3, 0xa037, 0x5, 0x6, 0x9, 0x8000]}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x2000, "0764836fd23f7fffbe0b78386d433a042b841600000100"}, 0x3c) (async) openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000009, 0x1010, r2, 0xfffffe01) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000300)={@empty, @broadcast, 0xffffffffffffffff, "35098dfbc680dd83afafb19636de665f10c7705fa6cc6b9b90c8c82d41aabca6", 0xad68, 0x8, 0x7, 0x9}, 0x3c) (async) openat$iommufd(0xffffff9c, &(0x7f0000000340), 0x200, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xddd3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40084) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x6, 0x5, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x80010, 0xffffffffffffffff, 0x7820000) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000200)=[0x1000, 0xffff, 0xfff8, 0xf022, 0x1000, 0x0, 0xffff, 0x800], &(0x7f0000000240)=[0x0, 0xff, 0x1, 0x1, 0x5, 0x1000, 0x8, 0x5, 0x0, 0xfff], &(0x7f0000000280)=[0x5c3, 0xa037, 0x5, 0x6, 0x9, 0x8000]}) (async) 23:13:26 executing program 0: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000180)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x8000}, 0x3c) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x400, 0x0, 0xffffffffffffffff}) write$tcp_congestion(r1, &(0x7f0000000140)='lp\x00', 0x3) (async, rerun: 32) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 32) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x3, 0x20, 0x23, 0xfe00, 0x0, "7b1419df5b6fecc2"}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x420101) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x1010, r0, 0x2) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x109000) (async) io_uring_setup(0x2148, &(0x7f0000000100)={0x0, 0xdd74, 0x2, 0x3, 0x84}) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000001c0)) (async) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4004b100, &(0x7f0000000180)={0x18, 0x0, {0x4, @random="50cacdf5007c", 'ip6gre0\x00'}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 23:13:26 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="015620616faaaa5c85cf3de2d5da80436d1143c80d27e7d386ad58e8a92364dc7aac66b90159add4bb54ec06d3e8e60000000000000073a08fa363642b999e9ad63ccc98f8086ccc80c3bbf45943f6089b1e968e1b65efb8f66cedc2e3bc8387537f47439ec90d1c759b5516b5eb180ca7eb0952f0e40749d06ea07a48e877d99ee96a56ecbc11456b7c45cbfb27de81343074b7915e1f6b787bdb558c9640f44c2a92e3c9a08e773f9a158ed81d7624bb3d0d9ca6a0136fb5758d1bf80911911f09e586e760aec53ab260eb8dcee3140a5343bcfc23504deb6296c3049a91559506ec9068e10000000000", @ANYRES16=r2, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="008d1b87d700fedbdf250700000008801700", @ANYRES32=r4, @ANYBLOB="06001a004e2300000800110001000000050006feffffffffffffff0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x44094) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async, rerun: 32) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)) ioctl$TCSETAF(r5, 0x5408, 0x0) (async) connect$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x404, 0x10000}, 0x20) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "07647fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b841600"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x0, 0xb0316c577480bafb) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x7, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) prctl$PR_SET_MM(0x25, 0x7, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000ff8000/0x1000)=nil}) 23:13:26 executing program 1: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x9, 0x4}, 0x20) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="8a6205003e80dc13080e652eddbf78f754423f4bf950b06c810231fadd975f0035a6", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf250a0000000a000900000000000000000008000b000400000008000b001ee500000a0009009ff69c5fcb57000005002e00000000000500290000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10004000}, 0x40) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x541242) syz_open_dev$usbfs(&(0x7f0000000040), 0x1000, 0x24400) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 23:13:26 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) (async) ioctl$TCSETAF(r3, 0x5408, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="015620616faaaa5c85cf3de2d5da80436d1143c80d27e7d386ad58e8a92364dc7aac66b90159add4bb54ec06d3e8e60000000000000073a08fa363642b999e9ad63ccc98f8086ccc80c3bbf45943f6089b1e968e1b65efb8f66cedc2e3bc8387537f47439ec90d1c759b5516b5eb180ca7eb0952f0e40749d06ea07a48e877d99ee96a56ecbc11456b7c45cbfb27de81343074b7915e1f6b787bdb558c9640f44c2a92e3c9a08e773f9a158ed81d7624bb3d0d9ca6a0136fb5758d1bf80911911f09e586e760aec53ab260eb8dcee3140a5343bcfc23504deb6296c3049a91559506ec9068e10000000000", @ANYRES16=r2, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="015620616faaaa5c85cf3de2d5da80436d1143c80d27e7d386ad58e8a92364dc7aac66b90159add4bb54ec06d3e8e60000000000000073a08fa363642b999e9ad63ccc98f8086ccc80c3bbf45943f6089b1e968e1b65efb8f66cedc2e3bc8387537f47439ec90d1c759b5516b5eb180ca7eb0952f0e40749d06ea07a48e877d99ee96a56ecbc11456b7c45cbfb27de81343074b7915e1f6b787bdb558c9640f44c2a92e3c9a08e773f9a158ed81d7624bb3d0d9ca6a0136fb5758d1bf80911911f09e586e760aec53ab260eb8dcee3140a5343bcfc23504deb6296c3049a91559506ec9068e10000000000", @ANYRES16=r2, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="008d1b87d700fedbdf250700000008801700", @ANYRES32=r4, @ANYBLOB="06001a004e2300000800110001000000050006feffffffffffffff0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x44094) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="008d1b87d700fedbdf250700000008801700", @ANYRES32=r4, @ANYBLOB="06001a004e2300000800110001000000050006feffffffffffffff0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x44094) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)) ioctl$TCSETAF(r5, 0x5408, 0x0) (async) ioctl$TCSETAF(r5, 0x5408, 0x0) connect$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x404, 0x10000}, 0x20) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "07647fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b841600"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x0, 0xb0316c577480bafb) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x7, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) prctl$PR_SET_MM(0x25, 0x7, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 1: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x9, 0x4}, 0x20) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="8a6205003e80dc13080e652eddbf78f754423f4bf950b06c810231fadd975f0035a6", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf250a0000000a000900000000000000000008000b000400000008000b001ee500000a0009009ff69c5fcb57000005002e00000000000500290000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10004000}, 0x40) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x541242) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x1000, 0x24400) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000ff8000/0x1000)=nil}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000ff8000/0x1000)=nil}) (async) 23:13:26 executing program 1: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x9, 0x4}, 0x20) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="8a6205003e80dc13080e652eddbf78f754423f4bf950b06c810231fadd975f0035a6", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf250a0000000a000900000000000000000008000b000400000008000b001ee500000a0009009ff69c5fcb57000005002e00000000000500290000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10004000}, 0x40) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x541242) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x1000, 0x24400) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x800100) mmap$usbmon(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1000004, 0x30, r0, 0x1) syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x40) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000ff8000/0x1000)=nil}) 23:13:26 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "07647fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b841600"}, 0x3c) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0x0, 0xb0316c577480bafb) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x7, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) prctl$PR_SET_MM(0x25, 0x7, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x800100) mmap$usbmon(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1000004, 0x30, r0, 0x1) syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x40) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x800100) (async) mmap$usbmon(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1000004, 0x30, r0, 0x1) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x40) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) (async) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0xabf7dc9d7a4f43bd, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x8000) 23:13:26 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x2}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @rand_addr=0x64010102, 0x4, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b060000000000000016", 0x0, 0x7f}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13002febb8042b841600", 0x0, 0x8000, 0x8, 0xc0000}, 0xfffffffffffffff3) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe2000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0fc72f0fb7dc66b96c08000066b8a700000066ba000000000f300f01c2baa100b0feeebaf80c66b8d0a4138366efbafc0c66b87fbc000066ef66b91603000066b89500000066ba000000000f3036670f01c866b8000000000f23d80f21f86635400000800f23f8640f01cf", 0x6b}], 0x1, 0x40, &(0x7f0000000100)=[@cstype3={0x5, 0x4}], 0x1) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0xabf7dc9d7a4f43bd, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x8000) 23:13:26 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13002febb8042b841600", 0x0, 0x8000, 0x8, 0xc0000}, 0xfffffffffffffff3) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe2000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0fc72f0fb7dc66b96c08000066b8a700000066ba000000000f300f01c2baa100b0feeebaf80c66b8d0a4138366efbafc0c66b87fbc000066ef66b91603000066b89500000066ba000000000f3036670f01c866b8000000000f23d80f21f86635400000800f23f8640f01cf", 0x6b}], 0x1, 0x40, &(0x7f0000000100)=[@cstype3={0x5, 0x4}], 0x1) 23:13:26 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x2}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @rand_addr=0x64010102, 0x4, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b060000000000000016", 0x0, 0x7f}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:26 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x800100) mmap$usbmon(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1000004, 0x30, r0, 0x1) syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x40) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) 23:13:26 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0xabf7dc9d7a4f43bd, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x8000) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13002febb8042b841600", 0x0, 0x8000, 0x8, 0xc0000}, 0xfffffffffffffff3) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe2000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0fc72f0fb7dc66b96c08000066b8a700000066ba000000000f300f01c2baa100b0feeebaf80c66b8d0a4138366efbafc0c66b87fbc000066ef66b91603000066b89500000066ba000000000f3036670f01c866b8000000000f23d80f21f86635400000800f23f8640f01cf", 0x6b}], 0x1, 0x40, &(0x7f0000000100)=[@cstype3={0x5, 0x4}], 0x1) 23:13:27 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x2}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @rand_addr=0x64010102, 0x4, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b060000000000000016", 0x0, 0x7f}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) openat$ptmx(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x2}) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @rand_addr=0x64010102, 0x4, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b060000000000000016", 0x0, 0x7f}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0xd, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x400, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x4}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@rand_addr=0x64010102, @private=0xa010100, 0x0, "4d7da6e6c9eef9ab9bd8422cf73499921b10ba4f47f5378a2a37cc6d2bfd3733", 0x5, 0x3, 0x10000, 0x1f}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x400, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x4}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x400, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x4}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@rand_addr=0x64010102, @private=0xa010100, 0x0, "4d7da6e6c9eef9ab9bd8422cf73499921b10ba4f47f5378a2a37cc6d2bfd3733", 0x5, 0x3, 0x10000, 0x1f}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0xd, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@rand_addr=0x64010102, @private=0xa010100, 0x0, "4d7da6e6c9eef9ab9bd8422cf73499921b10ba4f47f5378a2a37cc6d2bfd3733", 0x5, 0x3, 0x10000, 0x1f}, 0x3c) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@rand_addr=0x64010102, @private=0xa010100, 0x0, "4d7da6e6c9eef9ab9bd8422cf73499921b10ba4f47f5378a2a37cc6d2bfd3733", 0x5, 0x3, 0x10000, 0x1f}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x400, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x4}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0xd, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000b, 0x810, 0xffffffffffffffff, 0x0) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x1, 0x5, 0x4eed, 0x5, 0x11, "b58fce5960407cf3"}) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x38}, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x2, 0x0, 0x9}, 0x3c) prctl$PR_SET_MM(0x25, 0x2000000a, &(0x7f0000ffb000/0x4000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xc) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x5, 0x5, 0x49, 0x0, 0x1, "1140211a13aa0e452ac4a59615071e87ff9f08"}) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0x1) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async, rerun: 64) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000b, 0x810, 0xffffffffffffffff, 0x0) (rerun: 64) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x38}, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x2, 0x0, 0x9}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x2000000a, &(0x7f0000ffb000/0x4000)=nil) socket$inet_udp(0x2, 0x2, 0x0) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x1, 0x5, 0x4eed, 0x5, 0x11, "b58fce5960407cf3"}) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000b, 0x810, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000b, 0x810, 0xffffffffffffffff, 0x0) (async) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xc) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x5, 0x5, 0x49, 0x0, 0x1, "1140211a13aa0e452ac4a59615071e87ff9f08"}) (async) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0x1) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x38}, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x2, 0x0, 0x9}, 0x3c) prctl$PR_SET_MM(0x25, 0x2000000a, &(0x7f0000ffb000/0x4000)=nil) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) (rerun: 32) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async, rerun: 64) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (rerun: 64) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x1, 0x5, 0x4eed, 0x5, 0x11, "b58fce5960407cf3"}) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xc) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x5, 0x5, 0x49, 0x0, 0x1, "1140211a13aa0e452ac4a59615071e87ff9f08"}) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0x1) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xc) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x5, 0x5, 0x49, 0x0, 0x1, "1140211a13aa0e452ac4a59615071e87ff9f08"}) (async) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0x1) (async) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x311800) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @broadcast, 0x0, "0764d823d23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0xfffffffe, 0x0, 0x7ff}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 3: setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000), 0x4) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @local, 0x1, "81216c2fadacd0168c47a774e3c70b1af89af308abf423c035d2439965a5690b", 0x7, 0x5, 0x7}, 0x3c) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x311800) syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x311800) (async) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @broadcast, 0x0, "0764d823d23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0xfffffffe, 0x0, 0x7ff}, 0x3c) (async, rerun: 64) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (rerun: 64) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 3: setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000), 0x4) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @local, 0x1, "81216c2fadacd0168c47a774e3c70b1af89af308abf423c035d2439965a5690b", 0x7, 0x5, 0x7}, 0x3c) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000), 0x4) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @local, 0x1, "81216c2fadacd0168c47a774e3c70b1af89af308abf423c035d2439965a5690b", 0x7, 0x5, 0x7}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @broadcast, 0x0, "0764d823d23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0xfffffffe, 0x0, 0x7ff}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @broadcast, 0x0, "0764d823d23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0xfffffffe, 0x0, 0x7ff}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x311800) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 3: setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000), 0x4) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @local, 0x1, "81216c2fadacd0168c47a774e3c70b1af89af308abf423c035d2439965a5690b", 0x7, 0x5, 0x7}, 0x3c) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836f02000000be2c72e60e13152feb0056226d43d9042b841600"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc5}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8657}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x0) 23:13:27 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836f02000000be2c72e60e13152feb0056226d43d9042b841600"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x0) (async) 23:13:27 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 23:13:27 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc5}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8657}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc5}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8657}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836f02000000be2c72e60e13152feb0056226d43d9042b841600"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x0) 23:13:27 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 23:13:27 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc5}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8657}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc5}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8657}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x3, &(0x7f0000ffe000/0x1000)=nil) 23:13:27 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000280)={0x100, 0x3, &(0x7f0000000140)=[r2, r4, r6], &(0x7f0000000180)=[0x2, 0x80, 0x0, 0x5, 0x0, 0x200], &(0x7f00000001c0)=[r2], &(0x7f0000000240)=[0x65], 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, r2, 0xeeeeeeee}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000d, 0x40010, 0xffffffffffffffff, 0x7c47c000) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000002c0)={r6, 0x6, 0x4, 0x80000000, 0x1, [], [0xfffff801, 0x0, 0x2, 0x9], [0x3, 0x8, 0x8001, 0x40], [0x4, 0x40000000000000, 0xfffffffffffff84b, 0x1d1]}) ioctl$KDADDIO(r0, 0x4b34, 0x10001) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x2010, 0xffffffffffffffff, 0x100000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) 23:13:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r0, 0x7) 23:13:27 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000280)={0x100, 0x3, &(0x7f0000000140)=[r2, r4, r6], &(0x7f0000000180)=[0x2, 0x80, 0x0, 0x5, 0x0, 0x200], &(0x7f00000001c0)=[r2], &(0x7f0000000240)=[0x65], 0x0, 0x7}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, r2, 0xeeeeeeee}) (async, rerun: 32) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000d, 0x40010, 0xffffffffffffffff, 0x7c47c000) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000002c0)={r6, 0x6, 0x4, 0x80000000, 0x1, [], [0xfffff801, 0x0, 0x2, 0x9], [0x3, 0x8, 0x8001, 0x40], [0x4, 0x40000000000000, 0xfffffffffffff84b, 0x1d1]}) (async, rerun: 32) ioctl$KDADDIO(r0, 0x4b34, 0x10001) (rerun: 32) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x2010, 0xffffffffffffffff, 0x100000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f67ffbe2c72080f13152febb8566e0dbc0b78042b841600"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000003) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x4, 0x8d0}) 23:13:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r0, 0x7) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r0, 0x7) (async) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x3, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0xf, 0x3, &(0x7f0000ffe000/0x1000)=nil) (async) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x3, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0xf, 0x3, &(0x7f0000ffe000/0x1000)=nil) (async) 23:13:27 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000280)={0x100, 0x3, &(0x7f0000000140)=[r2, r4, r6], &(0x7f0000000180)=[0x2, 0x80, 0x0, 0x5, 0x0, 0x200], &(0x7f00000001c0)=[r2], &(0x7f0000000240)=[0x65], 0x0, 0x7}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, r2, 0xeeeeeeee}) (rerun: 32) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000d, 0x40010, 0xffffffffffffffff, 0x7c47c000) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000002c0)={r6, 0x6, 0x4, 0x80000000, 0x1, [], [0xfffff801, 0x0, 0x2, 0x9], [0x3, 0x8, 0x8001, 0x40], [0x4, 0x40000000000000, 0xfffffffffffff84b, 0x1d1]}) ioctl$KDADDIO(r0, 0x4b34, 0x10001) (async, rerun: 64) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x2010, 0xffffffffffffffff, 0x100000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) 23:13:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r0, 0x7) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r0, 0x7) (async) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f67ffbe2c72080f13152febb8566e0dbc0b78042b841600"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000003) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x4, 0x8d0}) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) shmget(0x0, 0x1000, 0x800, &(0x7f0000ff8000/0x1000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x82000000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x440fb1, 0x600) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f67ffbe2c72080f13152febb8566e0dbc0b78042b841600"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000003) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x4, 0x8d0}) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @private=0xa010101, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0xffffffff}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) shmget(0x0, 0x1000, 0x800, &(0x7f0000ff8000/0x1000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x82000000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async) shmget(0x0, 0x1000, 0x800, &(0x7f0000ff8000/0x1000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x82000000) (async) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x440fb1, 0x600) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x20000000, 0xfffffffc}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@multicast1, @local, 0x1, "b9f89ac03c1161ceefae84b9fc8a3222a07db996c0c16ab4c7c016ab5bd1a8f0", 0x1, 0x6, 0x7}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) shmget(0x0, 0x1000, 0x800, &(0x7f0000ff8000/0x1000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x82000000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x440fb1, 0x600) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @private=0xa010101, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0xffffffff}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x20000000, 0xfffffffc}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@multicast1, @local, 0x1, "b9f89ac03c1161ceefae84b9fc8a3222a07db996c0c16ab4c7c016ab5bd1a8f0", 0x1, 0x6, 0x7}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x20000000, 0xfffffffc}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@multicast1, @local, 0x1, "b9f89ac03c1161ceefae84b9fc8a3222a07db996c0c16ab4c7c016ab5bd1a8f0", 0x1, 0x6, 0x7}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ffb000/0x4000)=nil) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb, 0x80010, r1, 0x1db49000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0fb946fe0f01cf66f08101bf620fc7710066ba4200b800000000efc4c2752d2836660f225c3e0f00da66b880008ee03ef30fc733", 0x34}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0xa5b2680d1c6bd97a}, @cstype3={0x5, 0x6}], 0x2) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @private=0xa010101, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0xffffffff}, 0x3c) (async, rerun: 32) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (rerun: 32) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x40100) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}]}, 0x2c}}, 0x0) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0xc00, 0x0) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x20000000, 0xfffffffc}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@multicast1, @local, 0x1, "b9f89ac03c1161ceefae84b9fc8a3222a07db996c0c16ab4c7c016ab5bd1a8f0", 0x1, 0x6, 0x7}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ffb000/0x4000)=nil) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb, 0x80010, r1, 0x1db49000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0fb946fe0f01cf66f08101bf620fc7710066ba4200b800000000efc4c2752d2836660f225c3e0f00da66b880008ee03ef30fc733", 0x34}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0xa5b2680d1c6bd97a}, @cstype3={0x5, 0x6}], 0x2) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0xc00, 0x0) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ffb000/0x4000)=nil) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb, 0x80010, r1, 0x1db49000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0fb946fe0f01cf66f08101bf620fc7710066ba4200b800000000efc4c2752d2836660f225c3e0f00da66b880008ee03ef30fc733", 0x34}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0xa5b2680d1c6bd97a}, @cstype3={0x5, 0x6}], 0x2) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x40100) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}]}, 0x2c}}, 0x0) (rerun: 64) 23:13:27 executing program 2: openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x40100) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}]}, 0x2c}}, 0x0) (rerun: 64) 23:13:27 executing program 2: openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0xc00, 0x0) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ffe000/0x1000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x4, 0x400) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000140), 0x40, 0x80) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x20010, r1, 0x9) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r3 = openat$ttyprintk(0xffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0x6f5, 0x6, 0x3, 0xb, 0x5, "1a6e03004cb1b5edc1c75abb440678de8f1d97"}) r4 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x585180, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc}) userfaultfd(0x801) syz_io_uring_setup(0x6c5a, &(0x7f0000000240)={0x0, 0x6956, 0x100, 0x3, 0x33b}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3}) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000340)) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 23:13:27 executing program 2: openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async, rerun: 32) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (rerun: 32) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ffe000/0x1000)=nil) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x4, 0x400) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ffe000/0x1000)=nil) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000140), 0x40, 0x80) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x20010, r1, 0x9) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) (async) r3 = openat$ttyprintk(0xffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0x6f5, 0x6, 0x3, 0xb, 0x5, "1a6e03004cb1b5edc1c75abb440678de8f1d97"}) r4 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x585180, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc}) userfaultfd(0x801) (async) syz_io_uring_setup(0x6c5a, &(0x7f0000000240)={0x0, 0x6956, 0x100, 0x3, 0x33b}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3}) (async) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000340)) (async) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x4, 0x400) 23:13:27 executing program 3: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x884b8000) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000140), 0x40, 0x80) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x20010, r1, 0x9) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r3 = openat$ttyprintk(0xffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0x6f5, 0x6, 0x3, 0xb, 0x5, "1a6e03004cb1b5edc1c75abb440678de8f1d97"}) (async) r4 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x585180, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc}) (async) userfaultfd(0x801) (async) syz_io_uring_setup(0x6c5a, &(0x7f0000000240)={0x0, 0x6956, 0x100, 0x3, 0x33b}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3}) (rerun: 32) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000340)) (async) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1f) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, 0x0) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000240)={0x100, 0x9aeb, 0x800, 0x4f, 0xd82}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000000c0)={0x4, r2, r5}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r2, 0x0, r3, r1], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x1, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0xfffffffd}, 0x3c) prctl$PR_SET_MM(0x25, 0x7, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x6000, 0x0) set_mempolicy_home_node(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@empty, @broadcast, 0x0, "40b8bda9ef8f97ca89ea1d93698887c329f6ee4e67dec66910580ba0b09c5096", 0x9, 0x401, 0x7f, 0x10}, 0x3c) 23:13:27 executing program 3: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x884b8000) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x884b8000) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x10900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) socketpair(0x15, 0x6, 0x7f, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="348dd50d", @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf250100000006001b004e24000008001800ac1e0001080009000100000005000d000100000014002000fe880000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 23:13:27 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1f) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, 0x0) (async) ioctl$TCSETAF(r6, 0x5408, 0x0) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000240)={0x100, 0x9aeb, 0x800, 0x4f, 0xd82}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000000c0)={0x4, r2, r5}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r2, 0x0, r3, r1], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) 23:13:27 executing program 3: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x884b8000) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x1, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0xfffffffd}, 0x3c) prctl$PR_SET_MM(0x25, 0x7, &(0x7f0000ffc000/0x4000)=nil) (async) prctl$PR_SET_MM(0x25, 0x7, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x6000, 0x0) set_mempolicy_home_node(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@empty, @broadcast, 0x0, "40b8bda9ef8f97ca89ea1d93698887c329f6ee4e67dec66910580ba0b09c5096", 0x9, 0x401, 0x7f, 0x10}, 0x3c) 23:13:27 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1f) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, 0x0) (async) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000240)={0x100, 0x9aeb, 0x800, 0x4f, 0xd82}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000000c0)={0x4, r2, r5}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r2, 0x0, r3, r1], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x10900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) socketpair(0x15, 0x6, 0x7f, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="348dd50d", @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf250100000006001b004e24000008001800ac1e0001080009000100000005000d000100000014002000fe880000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 23:13:27 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000200)="e1", 0x1, 0x20004814, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x20) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x1, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0xfffffffd}, 0x3c) prctl$PR_SET_MM(0x25, 0x7, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x6000, 0x0) (async, rerun: 64) set_mempolicy_home_node(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2, 0x0) (rerun: 64) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@empty, @broadcast, 0x0, "40b8bda9ef8f97ca89ea1d93698887c329f6ee4e67dec66910580ba0b09c5096", 0x9, 0x401, 0x7f, 0x10}, 0x3c) 23:13:27 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000200)="e1", 0x1, 0x20004814, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x20) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x10900, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) socketpair(0x15, 0x6, 0x7f, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="348dd50d", @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf250100000006001b004e24000008001800ac1e0001080009000100000005000d000100000014002000fe880000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x10900, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) (async) socketpair(0x15, 0x6, 0x7f, &(0x7f00000000c0)) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="348dd50d", @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf250100000006001b004e24000008001800ac1e0001080009000100000005000d000100000014002000fe880000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x8401, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010100, @multicast2, 0x0, "5219045cf8287e47eef12a5f6208ea64a40bf25f7fab24118d407888d0892d6b", 0x2, 0x2, 0x7, 0x1800000}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000200)="e1", 0x1, 0x20004814, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x20) (async) sendto$l2tp6(r0, &(0x7f0000000200)="e1", 0x1, 0x20004814, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x20) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x39}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0) 23:13:27 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x101000, 0xe4) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_TENBIT(r0, 0x704, 0x0) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r0, 0x7) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) ioctl$I2C_TENBIT(r0, 0x704, 0x0) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x8401, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010100, @multicast2, 0x0, "5219045cf8287e47eef12a5f6208ea64a40bf25f7fab24118d407888d0892d6b", 0x2, 0x2, 0x7, 0x1800000}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x39}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x101000, 0xe4) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_TENBIT(r0, 0x704, 0x0) (async) ioctl$I2C_TENBIT(r0, 0x704, 0x0) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r0, 0x7) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) ioctl$I2C_TENBIT(r0, 0x704, 0x0) (async) ioctl$I2C_TENBIT(r0, 0x704, 0x0) 23:13:27 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x39}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x8401, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010100, @multicast2, 0x0, "5219045cf8287e47eef12a5f6208ea64a40bf25f7fab24118d407888d0892d6b", 0x2, 0x2, 0x7, 0x1800000}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfae, 0x0) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ff9000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 23:13:27 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x101000, 0xe4) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_TENBIT(r0, 0x704, 0x0) (async, rerun: 64) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (rerun: 64) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r0, 0x7) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) (rerun: 64) ioctl$I2C_TENBIT(r0, 0x704, 0x0) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x6, 0x0, 0x400}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x200000c, 0x50, 0xffffffffffffffff, 0x8000000) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ff9000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ff9000/0x1000)=nil) (async) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) (async) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="1227bb14932950e7c28e7718178b40465c8a5318ea848c5c48dcf76e634ea8e3325865f8c3446c59a4cedb497fcec3b41132c6c87b0434f344cb422df6f1be7103714647ee663c38e42784879f6d61f746743daa183742d8b69f0ad73e6186ef09e763cbe40975e8401bd0f2674cb048c6d0870e7f76bc5ef055c10e47a6b33c17eeba9098be0684f15176d5dc190e907e", 0x91}, 0x64) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000011c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)="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", 0x1000}, 0x64) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000ff8000/0x4000)=nil}) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000180), 0x8a200, 0xbec30e0e6e925693) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x6, 0x0, 0x400}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x200000c, 0x50, 0xffffffffffffffff, 0x8000000) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ff9000/0x1000)=nil) (async) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ff9000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfae, 0x0) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x6, 0x0, 0x400}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x200000c, 0x50, 0xffffffffffffffff, 0x8000000) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="1227bb14932950e7c28e7718178b40465c8a5318ea848c5c48dcf76e634ea8e3325865f8c3446c59a4cedb497fcec3b41132c6c87b0434f344cb422df6f1be7103714647ee663c38e42784879f6d61f746743daa183742d8b69f0ad73e6186ef09e763cbe40975e8401bd0f2674cb048c6d0870e7f76bc5ef055c10e47a6b33c17eeba9098be0684f15176d5dc190e907e", 0x91}, 0x64) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000011c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)="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", 0x1000}, 0x64) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000ff8000/0x4000)=nil}) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000180), 0x8a200, 0xbec30e0e6e925693) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="1227bb14932950e7c28e7718178b40465c8a5318ea848c5c48dcf76e634ea8e3325865f8c3446c59a4cedb497fcec3b41132c6c87b0434f344cb422df6f1be7103714647ee663c38e42784879f6d61f746743daa183742d8b69f0ad73e6186ef09e763cbe40975e8401bd0f2674cb048c6d0870e7f76bc5ef055c10e47a6b33c17eeba9098be0684f15176d5dc190e907e", 0x91}, 0x64) (async) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000011c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)="7fbdb714b7aa9ddf2cc3e12018820e1a27a98ddb2af50426189ab616c2b14f65485af774ced7df110b21cf97b815cc04584803a48923f5429b636ef75840571d5d98d2f54e251e9dc50b5b2b1c0860865da01831822ca1707edf8d32b2fe6c932bba98e0f45f9f3e3bd69380c648896c5c5c61701d5026a327e948a77dd635f5fe809dde737cf7399d1cb174f6f62efda26bcd54f6d3cacb29948ace9da895b0cbeefb6934e69847ce2e5ea840e49370aa755e49fd3a855340a1dfecd376cd8449470c2e6c733b0a439cbaf0ae0c02e1b4bc140a9e004ae763373c812217e62718bde23297b74a651160a152512fc5d8dad97198be61bba0c475f94950cc5d69c0100a58942e290148737a85d64df43a1ce8a313cba944f2e3de7b9b68ca1b1dd5a2f356506d4b3adc5f4f83d21adad54ae4f598a1d997c0fae2d561aae0d0e0988298ea67189a0e5927a3b453e3936f08e2242f3d2b1d8c0113b43f5e756d584aa10c71d55107eaef4da34244e4c5350f30ee8c24bfa1cd342d940583388fd15ac3999a5544d4ae42954b40eef214e00d36c376951386cf77ffa2a07ddd5af9e2abe0b59511a4bd327545d2956d2fa42f41aa5a5a8aa7a68f74e19bbf2f9e2308697be33a4eb05b2f59b06f6b0ea05384dd42eb309bdc1836d14727d3d334ddcc137df0777ab68b1160c644d92fe04bcfd4071de71c2c10decbd514e6a4517501d81ca557180921bc5e76f299d9c4b394de120203b39f311d5624bec884f4240f095bb80cde0033e8129a3da67140aff06aa7195a32a33923652d5748b7e2ffb2211ecfd7700068f6928977a4ac76ce4d5ec6e15a87ba6aa9aceaec11df21132cbff6dcd9da0a4950e334cdc16c909501d77d3767d9771f84a56365f3944a0d8f07a5bd6404d1adee04c44d1a503ce8195d6823bd4b877011b08ca38145107278e02b129bb3b14bdbd32bbfa8dd63b799fadc63e23681239dbfa8f7d102015b5fc8229eb9fac8e37d22f5a7e3499bfb806ada993360f1d84578012e46a0049fd422bcb66728d47a34e7453d1d01d0d6499a6874c34145df1f9c2f63ec6fdfac3aca3e3b038063fa3f3c7415f87914fceb602119e0dd6b4ac29b4b4968675e0efaa10c7f753ebee2ced847d3cbca65a9e02314fab856c6646a2493bc548c98586cd39c3ed1a597b599c4b77f870e8fbcd824b9dd309311c4deefdcda44011536de57b75a10838802de2331c039061a3efbd0d2c1861dcdee27cc7e9d97dc8a6537f42ecea4b214547fd3293680cd6995f2859f4796fbc4cc90c4666f2eeb31d46ab148cf3b5859e197b465e08715b418549d0f693db840b35f901289351635ae59a56cb2b4ea2170704001eddc9637108c4d54465e5bc7fd10122878df731af6bf1a0430de080f346d90b8ef205a8111d6989951c9eef74c79d787c21b78fab2812950fd8568ff7855656ec5d01c130feee42498c5ab26f26f21d73444979d1d6567435c6891399aa3720bb65809bbe2ec3d8c3d1a5257f4b416ff1aa6ffa832bc5e148b756fe1d7c431696cec35d8682c74f1845bfdb575816fd89d23d8839195f4c911f53ab4cd2354e276b409b4aa15f15aba0eafb5a65902e2f9442e2a29475788dfa08651b600c109240fd88c7ad0df0e880048ec37b9ad2b72ed62cc1cb6115477b79764bb5f1a3c0a1ba4b97e333093a256f6c3038d81a177c0a928e1d84b7ae84448019096945ed4f6c5ac3685d6ddd48b2c09a616d4a6f58126a4c717310ab84a2f09b602d56042c91c5b3354273dc27b657820e4fa343a3430ccfaf201aa34047a3ad31fa597309f7f2f93ad5e8c3233078b9c38fe5c40c7d27772d71082de928e8ea41564c9bb7de0931d87400076bd59697e13a5a052575ca99005a8f3f465efcd8cdcf9541d1b76d5f1cd24d2d8cdbb4f0174f49456dccbe112326baff404bef8f5b2f584d11738d46ff1b70eaaef618476696e9e4bde1217af4b2170d0f9cc92847ea0d5aec4aad70b4d5b51413566eabcdb937e5db1a830f94e6d1edf2d98fd85fc712cb2807d1fa54070ee850ac95c42aa3bf4800b31db98d6ea8ba326dff8a127be41db7ddae723b2ab0c00061136295c1531f5b1802be42bb4a48187a08089793f0a26c2ebbb964cb778a1b40ffc997a69458f2efaf1c6e59cf6791ad5460fd54adabb4fe9492197016be8ed442d9963322ecc47d52d88391a11411c5578fbdc39eb39d6ffe204c02c56e13a5a8c9fb73ddda92e98d652378b70de7fcc8dd70fcc94c1add86e7f289efabde25c3c476364bc6f951629571b1d225840cc33a566e2b96572efdacff7570375a02bb067168a29c968b4553ad63413763b29fc28e87525f65499f504ecd85e8b2350c1469a7eba7cad6ddc946a62e7c7b1163eafed44006a938a105d6d3ff179dde30e7ef5d50f508a040eb5990a82e4c0be967f968db2a889c0dbf08930a59952db8551a40ab88609a8042f7a3b8aad8657c836eb653a40ce3dfbfbc33a3ca5c973d83a36a5b1f8898f0771a8a12e303818ca5bb3b7736033e77924f6783f4d6fddd8d49176c19a6477cb216c11eaaf30efd5c42ec1062491f30cb35f17ee9d6d26fb8fd0822f6d5f7bc6fa35cbe5a11143108f751780a6c58acc2b79754eec44f7ed72d24306c9f17ad26081d3d3fe381d2f5cecfb945beec5aad7b6a7505560cb686ba3c3238137ea62b2e07a3596042ed0c6cbdf46a7aafcd1dc7ad7abd0d0a5a70fce89c77c53fe29faace0ccc37af0dc9d3fee9bd6f2825faab93d3ab4830018b2a4819adc36759d42c91c34f637d6d8c0747aa626885f73006ca7b47145453400ee34d890baa16f2712fa019e66e46003f27ab87d30e1b3528acc7cbf137113a3ca69c3ebe8ff364968e11a6a3dc7f9d4ab62573276a93448e2962638f9945b7496a8387f920f804f0f821b652c687f0092d3513f754c9a7ecc7912f0c1661831d95fb7b8a5bdd738670498763deeaf75cedaa9f1581a1213b2ae6d9ab00ddd8bf8baa6aea0b650b1c770ef68c18b07c2bdadff55b33a9b6a62ecbbc04366b7938e1ac7db311c4ee4f1c7e86dabd8c744a58ffcfa801aee23de365b6ff090cd8703a889753f814e0968ebb52a9d5e7db7dc624a7455c17d5199a69eaf20b7374001fb5e31ec1cda7ac7db957b80b6a67e955de70dcc10449499cd92d421e83def4b9d440fdadd9a4a34801ef09a426e1d75132b2d2aafa55cff718524ef272bfa81adf665ea0d751eb472942ed6522000e7cad45776f85da3895a5af84d4b45eea9bab2e236845ece53647be7f79014f2024950c13f6dff0a80b51b6e41b1ba230a4b5a5be7797b15b956269848899d039713a085f5a1b89a72a3a962ea1528e61a80d33281608cbab4e0dfa6b27a6890426b1bda9619db472a07be5f469a5f99397f4864cd7f5c077c4c9bebb0192ae554953f59ce3dcfadfbe0645694a66797c7d4fc5c75471524efc4d76cb30120429e844f4eff0bacc87fb6d7fa228ad04ffae22c3cee2821fe246ca5d7cc5013233b96574df696f490221831f646e8224942b8df1ff72ec2250ecf639603f1ae09cf9145ee0bacba1421e051ee9542513ca73d907e2b53aa523ccc350014ccc56ae91d83e9e84ab72e5bef26172eee04c48282a60acc133b26c0be5092ce260cba694fe13b41aa85ca7608d6c02c2c900226dad90b63af95120481548253a1b5ad9dc2c88a3c9acb06e136153a0a5c2c676d5bff88842ceb217c8c0ee72ae3e9d44871b249dbb6a96e51db19d93b0eefff397aebade91769eac9466ceac7c69bf26c8abebdb068fd28818e3d5c52c94a04440c4de516a67537b29457a144441b367271c65576885ac7d25c5e877a908c18fd4533f00550bd74386e1f9985294d8efdfa38df778a9383ebe02de93d84e3a13e03728869447be6570b85dcce0e2dc8d93fb26039e652a15b6a3f5427d178b2b25806846f59b622ffd60bee4c12f92d9ff1b2e640a8a544f9db7b55b74c0cc766484e7005c2c57f09f16aa6ced56d9a226a8f721b11a8d5f35393727b0c165757ad5fbb18dbf4b94a94f870029a490616520704bb080b948389a543aa7e9c375a9328b398b1b980787664eb8c2b5d143241b27681e1d0747bd6855b3370d2938ffb53e9ce3984fcd2ccc210694f00f148893c2b1be921e9a0e5b4ad9c82e9a53dc6e5a5372b7db77ea72785e6f0cce217e4914386cf40e8db5bf741b66d2a35b645a348b503420fa8b2021002e221ce84181fc90ae097e77bf7cd6633e4c2860d455e055ed3920fd086cbde02686938377e5d41c539f276c6bb611a8236a6f59dd59b28a74f0a416533d6f3554713173701a706901c2135d9d7d12d791d62f410cb2da00e62a7cab09eb248a6ca70485dbd954507fa53e8973be7b18ef01eaf52028987a1dd36b6a557e996632a16e5e99c9b6a68d3f0159a9c828eb354d7f144a7d13357655b4860b989ba0f6fe98654dd7d11fe50e0146f9e8d93d991f0df96d94c7e89bd089133cc6953823f2a3be2703795935304fa04a88cef3cfa5226cc22959fdab0fb256bf467084f522f87680651224002325fed94e132e112583a3d176d166f71f1bd75e9432125a04173a7698f7ffe5e7194eac28b3d1ff1e25a4970c508e073cb612de7e2952ccfd72f11cc030f6d5cfb139e0de31ea74d6cae44846474e73b70a40a1e5da65e9e6c1966642b12b00217dd9dc3bb5183e260115c6af2ac564d905aa3f9705656c7ab5fee48aba42aa1e692aade88efcc896cae4ccf46ff8a82e0aaf31d17b6bfbcb9f8ef0562c36df47e9220e4ac1167dcdcc83eef210bc41ef5f0eca58acfa1ad8276e2f68d11dbfdaa5423dc0f41061c364fcea34e83d3c3cfea05d9455b68472b124a264c67903292fbe4c63ee45f999782e9422c5071870d4f8efd198f8a86016879d42750a8e6447faf11371287eb89891b90bae9d4f982aad5527f6e5d3e278a7bef8deff83fe66d93fa457691f733d06efa525db9835b4460add3f58c1fe32be4869be0f1025d6c46e2957e18167414f5f7713a3beb1379bac692c90e742f8493d6c7ea4428234b00015f141388d4235f0aace015f311c08fa0d4bd33a5b0e5297b34fc8dee350b51715fa43b194eb9a44d4d0a78bdb1b61976bd8a5836c2a32da9110c397cf8a76655379aec66b156ce8a2e0a127835e4c5f7d801587bf414cae5f5b228e553cfc7bdd304ec03a1924110969c7383c85af2d525b50b7665940d64e8557d27ac6725ed8ad34c87f67e14d3aded44c6e83852ce5ca20e757f801f85ac9423619da7eb118ccde4617745104a077eb6042fa53839cc47817071dd6798a1b839b50df24962e659ff4d1ebe63c86e17ad00d01939fd4dc7b6bb331641a590e5b0be7d60eded9c0ff0df46af4e79267690ed28c960aeebe5d0489edc1b4719b13d6d4a010e9cf874dc66ae6d9b00ed365c35e59835432284b454fb7b8cee89ab3f8687fc821bddf3af16fffa55ee84156f594f63f333068c7312485f85a75cbb6673d04fc3fc9564d8c5e40728911ef847aa2103c5c3fb9638587f17baf99cde0c2a55d3a781495be3b98c507fbc924cffb840f7c8381329cb986290daecb5c13d591672397bc5f23f7825b164536472d85dd19f843da34a90057fe68477961be2c358091dfedfc47feb3ebd70409170b21951894d76e02d7a66d75a3b9d5be37c60585382477ad264b8c04080b61b757c099f13cb8ebe4fa02b5f68e4af2fff493ffcb5df78e1ad604d3e1c586df5016dbd0d0c", 0x1000}, 0x64) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000ff8000/0x4000)=nil}) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000180), 0x8a200, 0xbec30e0e6e925693) (async) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@remote, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@multicast2, @local, 0xffffffffffffffff, "25caf22b6a61aae05570a014befdd688874ead62c3382813b473481795b4197c", 0x0, 0x8, 0x2, 0x13}, 0x3c) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x80804, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x0, @remote, 'vcan0\x00'}}, 0x1e) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@remote, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@multicast2, @local, 0xffffffffffffffff, "25caf22b6a61aae05570a014befdd688874ead62c3382813b473481795b4197c", 0x0, 0x8, 0x2, 0x13}, 0x3c) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x80804, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x0, @remote, 'vcan0\x00'}}, 0x1e) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="1227bb14932950e7c28e7718178b40465c8a5318ea848c5c48dcf76e634ea8e3325865f8c3446c59a4cedb497fcec3b41132c6c87b0434f344cb422df6f1be7103714647ee663c38e42784879f6d61f746743daa183742d8b69f0ad73e6186ef09e763cbe40975e8401bd0f2674cb048c6d0870e7f76bc5ef055c10e47a6b33c17eeba9098be0684f15176d5dc190e907e", 0x91}, 0x64) (async) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000011c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)="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", 0x1000}, 0x64) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000ff8000/0x4000)=nil}) (async, rerun: 32) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000180), 0x8a200, 0xbec30e0e6e925693) (rerun: 32) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) socket$igmp(0x2, 0x3, 0x2) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfae, 0x0) 23:13:27 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@remote, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@multicast2, @local, 0xffffffffffffffff, "25caf22b6a61aae05570a014befdd688874ead62c3382813b473481795b4197c", 0x0, 0x8, 0x2, 0x13}, 0x3c) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x80804, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x0, @remote, 'vcan0\x00'}}, 0x1e) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x4, 0x4000000) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) socket$igmp(0x2, 0x3, 0x2) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x28c000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7) ioctl$TCSETAF(r0, 0x5408, 0x0) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000040)) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async, rerun: 32) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x4, 0x4000000) (rerun: 32) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="139d0000", @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x364}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0xc11, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000006c0), 0x141000, 0x1) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, "882980f0194f7d6218ca7786a4f427ee1ba0ccbbf625e2f689612b06f6db8981", 0x8, 0x934a, 0x9, 0x1}, 0x3c) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0), 0x0, 0x80000}) ioctl$TCSETAF(r6, 0x5408, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xccb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}}, 0x10) r9 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r9, 0x5408, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x678e9ed9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44120}, 0x840) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x88c1) 23:13:27 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x28c000, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x28c000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000040)) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x2000) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x4, 0x4000000) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="139d0000", @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000"], 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x364}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) (rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0xc11, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) (async) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) (async) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000006c0), 0x141000, 0x1) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, "882980f0194f7d6218ca7786a4f427ee1ba0ccbbf625e2f689612b06f6db8981", 0x8, 0x934a, 0x9, 0x1}, 0x3c) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0), 0x0, 0x80000}) ioctl$TCSETAF(r6, 0x5408, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xccb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}}, 0x10) (async) r9 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r9, 0x5408, 0x0) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x678e9ed9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44120}, 0x840) (async, rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x88c1) (rerun: 32) 23:13:27 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x28c000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 64) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (rerun: 64) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000040)) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x2000) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x5, 0x1, 0x5000, 0x1000, &(0x7f0000ff4000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="36650f013e3913baf80c66b89ee60c8166efbafc0cb8cc79ef2e0faefc26652e36f30f1edbba4100ecba4000b80018ef0ffe1bdf48380f080f20e06635100000000f22e0", 0x44}], 0x1, 0x7, &(0x7f00000000c0)=[@cr4={0x1, 0x400004}], 0x1) 23:13:27 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x33}, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0xffffffff, 0xffffffff, 0x0, 0x200000}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="139d0000", @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="139d0000", @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x364}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0xc11, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000006c0), 0x141000, 0x1) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, "882980f0194f7d6218ca7786a4f427ee1ba0ccbbf625e2f689612b06f6db8981", 0x8, 0x934a, 0x9, 0x1}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, "882980f0194f7d6218ca7786a4f427ee1ba0ccbbf625e2f689612b06f6db8981", 0x8, 0x934a, 0x9, 0x1}, 0x3c) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0), 0x0, 0x80000}) ioctl$TCSETAF(r6, 0x5408, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xccb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}}, 0x10) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r9 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r9, 0x5408, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x678e9ed9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44120}, 0x840) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x88c1) 23:13:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x2000) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x5, 0x1, 0x5000, 0x1000, &(0x7f0000ff4000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="36650f013e3913baf80c66b89ee60c8166efbafc0cb8cc79ef2e0faefc26652e36f30f1edbba4100ecba4000b80018ef0ffe1bdf48380f080f20e06635100000000f22e0", 0x44}], 0x1, 0x7, &(0x7f00000000c0)=[@cr4={0x1, 0x400004}], 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="36650f013e3913baf80c66b89ee60c8166efbafc0cb8cc79ef2e0faefc26652e36f30f1edbba4100ecba4000b80018ef0ffe1bdf48380f080f20e06635100000000f22e0", 0x44}], 0x1, 0x7, &(0x7f00000000c0)=[@cr4={0x1, 0x400004}], 0x1) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x0, 0xff}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000080)={@broadcast, @private=0xa010101, 0x1, "925060d0accecff9751f7f1ba1f010c0d9260b1f7a7199822a9c60eeec768bb1", 0x8000, 0x5, 0x8000, 0x2}, 0x3c) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x5, 0x1, 0x5000, 0x1000, &(0x7f0000ff4000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="36650f013e3913baf80c66b89ee60c8166efbafc0cb8cc79ef2e0faefc26652e36f30f1edbba4100ecba4000b80018ef0ffe1bdf48380f080f20e06635100000000f22e0", 0x44}], 0x1, 0x7, &(0x7f00000000c0)=[@cr4={0x1, 0x400004}], 0x1) 23:13:27 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x33}, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0xffffffff, 0xffffffff, 0x0, 0x200000}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0xddb4, "e36a34", 0x2, 0x40}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 23:13:27 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x33}, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0xffffffff, 0xffffffff, 0x0, 0x200000}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000000c0), 0x503140, 0x20) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x0, 0xff}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000080)={@broadcast, @private=0xa010101, 0x1, "925060d0accecff9751f7f1ba1f010c0d9260b1f7a7199822a9c60eeec768bb1", 0x8000, 0x5, 0x8000, 0x2}, 0x3c) 23:13:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0xddb4, "e36a34", 0x2, 0x40}) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0xddb4, "e36a34", 0x2, 0x40}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 23:13:27 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000000c0), 0x503140, 0x20) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) 23:13:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd70000200000005"], 0x40}}, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x40080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000280), 0xa0000, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x2, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x13}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x7e0910f85b0af435) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x331, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x20000000) 23:13:27 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x0, 0xff}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000080)={@broadcast, @private=0xa010101, 0x1, "925060d0accecff9751f7f1ba1f010c0d9260b1f7a7199822a9c60eeec768bb1", 0x8000, 0x5, 0x8000, 0x2}, 0x3c) 23:13:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0xddb4, "e36a34", 0x2, 0x40}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) [ 1988.483965][T18057] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000000c0), 0x503140, 0x20) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x3) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) 23:13:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd70000200000005"], 0x40}}, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) ioctl$TCSETAF(r2, 0x5408, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x40080) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x40080) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000280), 0xa0000, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x2, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x13}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x7e0910f85b0af435) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x331, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x20000000) 23:13:28 executing program 1: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x2, 0x6, 0x800, 0x2, 0x11, "bf54058856eeedaa"}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:28 executing program 3: ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) [ 1988.518138][T18071] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 23:13:28 executing program 1: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x2, 0x6, 0x800, 0x2, 0x11, "bf54058856eeedaa"}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd70000200000005"], 0x40}}, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x40080) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000280), 0xa0000, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x2, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x13}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x7e0910f85b0af435) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x331, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x20000000) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x3) (async) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x3) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) 23:13:28 executing program 3: ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 1: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x2, 0x6, 0x800, 0x2, 0x11, "bf54058856eeedaa"}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) [ 1988.555543][T18087] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x3) (async) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) 23:13:28 executing program 3: ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000000c0), 0x109000, 0x181) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000100)=0xfe, 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000140)=0xfe, 0x4) mmap$qrtrtun(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x9, 0x10010, r0, 0x8000) 23:13:28 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x2, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000180)={r0}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e130b78186d4335042b8c160000000800"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0xc100, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="74f60000", @ANYRES16=r2, @ANYBLOB="000828bd7000fbdbdf25100000000500330002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004885}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044080}, 0x4) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000000c0), 0x109000, 0x181) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000100)=0xfe, 0x4) (async) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000140)=0xfe, 0x4) (async) mmap$qrtrtun(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x9, 0x10010, r0, 0x8000) 23:13:28 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x2, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000180)={r0}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e130b78186d4335042b8c160000000800"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x2, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x2, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000180)={r0}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:28 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0xc100, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="74f60000", @ANYRES16=r2, @ANYBLOB="000828bd7000fbdbdf25100000000500330002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004885}, 0x8001) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044080}, 0x4) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000000c0), 0x109000, 0x181) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000100)=0xfe, 0x4) (async) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000140)=0xfe, 0x4) (async) mmap$qrtrtun(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x9, 0x10010, r0, 0x8000) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e130b78186d4335042b8c160000000800"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x100ffff, 0x301200) socket$xdp(0x2c, 0x3, 0x0) 23:13:28 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0xc100, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="74f60000", @ANYRES16=r2, @ANYBLOB="000828bd7000fbdbdf25100000000500330002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004885}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044080}, 0x4) 23:13:28 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x7, [0x5, 0x3], 0x1}, 0x10) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) mmap$usbfs(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x1, 0x50, 0xffffffffffffffff, 0x2) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x1}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000280), 0x80002, 0x9) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x29}, 0x1, "a10bfb4cd23f5abe446116196bc1477fff2cac232677a1caca7651924324a769", 0x1, 0x2, 0x0, 0x5}, 0x3c) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x1}}}, 0x5) ioctl$TCSETAF(r2, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="460f07420fc734f70f20d835200000000f22d8660f3881b20048000066baf80cb8680c2183ef66bafc0cb800000000ef0f06b9910b0000b800800000ba000000000f30660f7d3c7d0098000066b87f008ee8c744240025784325c7442402cd000000c7442406000000000f011424", 0x6e}], 0x1, 0x46, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], 0x1) write$bt_hci(r0, &(0x7f0000000240)={0x1, @pin_code_neg_reply={{0x40e, 0x6}}}, 0xa) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @broadcast, 0xfffe, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x1, 0x3}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = userfaultfd(0x4e5e954ebb969ac9) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) 23:13:28 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000080)={@multicast2, @multicast2, 0xffffffffffffffff, "21cd078750adf616724e4b5cabe01a6111ed5514b7fbb112e8ea2a174940ae85", 0x4, 0x0, 0x7, 0xcee}, 0x3c) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ffb000/0x2000)=nil) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x100ffff, 0x301200) (async) socket$xdp(0x2c, 0x3, 0x0) 23:13:28 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x7, [0x5, 0x3], 0x1}, 0x10) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) mmap$usbfs(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x1, 0x50, 0xffffffffffffffff, 0x2) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x1}) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000280), 0x80002, 0x9) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x29}, 0x1, "a10bfb4cd23f5abe446116196bc1477fff2cac232677a1caca7651924324a769", 0x1, 0x2, 0x0, 0x5}, 0x3c) (async) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x1}}}, 0x5) (async) ioctl$TCSETAF(r2, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="460f07420fc734f70f20d835200000000f22d8660f3881b20048000066baf80cb8680c2183ef66bafc0cb800000000ef0f06b9910b0000b800800000ba000000000f30660f7d3c7d0098000066b87f008ee8c744240025784325c7442402cd000000c7442406000000000f011424", 0x6e}], 0x1, 0x46, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], 0x1) write$bt_hci(r0, &(0x7f0000000240)={0x1, @pin_code_neg_reply={{0x40e, 0x6}}}, 0xa) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @broadcast, 0xfffe, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x1, 0x3}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = userfaultfd(0x4e5e954ebb969ac9) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) 23:13:28 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000080)={@multicast2, @multicast2, 0xffffffffffffffff, "21cd078750adf616724e4b5cabe01a6111ed5514b7fbb112e8ea2a174940ae85", 0x4, 0x0, 0x7, 0xcee}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ffb000/0x2000)=nil) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x100ffff, 0x301200) (async) socket$xdp(0x2c, 0x3, 0x0) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @broadcast, 0xfffe, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x1, 0x3}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) userfaultfd(0x4e5e954ebb969ac9) (async) r0 = userfaultfd(0x4e5e954ebb969ac9) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) 23:13:28 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x7, [0x5, 0x3], 0x1}, 0x10) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async, rerun: 32) mmap$usbfs(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x1, 0x50, 0xffffffffffffffff, 0x2) (async, rerun: 32) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x1}) (async, rerun: 32) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000280), 0x80002, 0x9) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x29}, 0x1, "a10bfb4cd23f5abe446116196bc1477fff2cac232677a1caca7651924324a769", 0x1, 0x2, 0x0, 0x5}, 0x3c) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x1}}}, 0x5) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="460f07420fc734f70f20d835200000000f22d8660f3881b20048000066baf80cb8680c2183ef66bafc0cb800000000ef0f06b9910b0000b800800000ba000000000f30660f7d3c7d0098000066b87f008ee8c744240025784325c7442402cd000000c7442406000000000f011424", 0x6e}], 0x1, 0x46, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], 0x1) (async) write$bt_hci(r0, &(0x7f0000000240)={0x1, @pin_code_neg_reply={{0x40e, 0x6}}}, 0xa) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfae, 0x519800) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_TENBIT(r0, 0x704, 0x1) 23:13:28 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000080)={@multicast2, @multicast2, 0xffffffffffffffff, "21cd078750adf616724e4b5cabe01a6111ed5514b7fbb112e8ea2a174940ae85", 0x4, 0x0, 0x7, 0xcee}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ffb000/0x2000)=nil) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ff9000/0x2000)=nil, 0x2000}, 0x2}) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfae, 0x519800) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_TENBIT(r0, 0x704, 0x1) 23:13:28 executing program 3: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x628002, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0xef2, 0x8, 0x10001, 0x6, 0x1}) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfae, 0x519800) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_TENBIT(r0, 0x704, 0x1) 23:13:28 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x10d400, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x110, r0, 0x6) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ff9000/0x1000)=nil, 0x80, 0x3, 0x4a}) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ff9000/0x2000)=nil, 0x2000}, 0x2}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ff9000/0x2000)=nil, 0x2000}, 0x2}) (async) 23:13:28 executing program 3: openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x628002, 0x0) (async) r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x628002, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0xef2, 0x8, 0x10001, 0x6, 0x1}) 23:13:28 executing program 1: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x7, 0x6, 0x81, 0x76, 0x4, "e043a968109910db"}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xffff, 0x9}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x9, 0x7, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @broadcast}, 0x10) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000140)) 23:13:28 executing program 3: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x628002, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0xef2, 0x8, 0x10001, 0x6, 0x1}) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ff9000/0x2000)=nil, 0x2000}, 0x2}) 23:13:28 executing program 1: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x7, 0x6, 0x81, 0x76, 0x4, "e043a968109910db"}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xffff, 0x9}]}) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xffff, 0x9}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x9, 0x7, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @broadcast}, 0x10) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000140)) (async) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000140)) 23:13:28 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x10d400, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x110, r0, 0x6) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x110, r0, 0x6) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ff9000/0x1000)=nil, 0x80, 0x3, 0x4a}) 23:13:28 executing program 1: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x7, 0x6, 0x81, 0x76, 0x4, "e043a968109910db"}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xffff, 0x9}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x9, 0x7, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @broadcast}, 0x10) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async, rerun: 32) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000140)) (rerun: 32) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ffd000/0x1000)=nil) 23:13:28 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x10d400, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x110, r0, 0x6) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ff9000/0x1000)=nil, 0x80, 0x3, 0x4a}) 23:13:28 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x3f65a000) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@remote, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60ebc0b78186d43350410841600", 0x0, 0x4, 0x0, 0x2}, 0x3c) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000000c0)) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x3f65a000) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@remote, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60ebc0b78186d43350410841600", 0x0, 0x4, 0x0, 0x2}, 0x3c) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000000c0)) (async) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000000c0)) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ffd000/0x1000)=nil) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'team0\x00'}}, 0x1e) pipe2$watch_queue(&(0x7f0000000080), 0x80) 23:13:28 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x3}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x3f65a000) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@remote, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60ebc0b78186d43350410841600", 0x0, 0x4, 0x0, 0x2}, 0x3c) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000000c0)) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ffd000/0x1000)=nil) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'team0\x00'}}, 0x1e) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) 23:13:28 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x3}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 0: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_RETRIES(r0, 0x701, 0x4) syz_open_dev$ptys(0xc, 0x3, 0x0) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, 0xffffffffffffffff, 0x8000000) 23:13:28 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x3}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCXONC(r0, 0x540a, 0x2) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x3}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:28 executing program 0: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'team0\x00'}}, 0x1e) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) 23:13:28 executing program 3: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_RETRIES(r0, 0x701, 0x4) syz_open_dev$ptys(0xc, 0x3, 0x0) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, 0xffffffffffffffff, 0x8000000) 23:13:28 executing program 0: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x6, 0x6, {{0x14, 0x4, 0x0, 0x5, 0x50, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @remote, {[@ssrr={0x89, 0x1f, 0xfc, [@broadcast, @remote, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @lsrr={0x83, 0x17, 0xd1, [@multicast1, @empty, @remote, @private=0xa010100, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1800, 0x0, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x5, 0x7, 0x6, @vifc_lcl_addr=@rand_addr=0x64010100, @remote}, 0x10) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @local, 0x1, "8973e71bd3e4c39f5738d794fc7af12f6505bd6ed3d3768b89de4a507717fb25", 0x6, 0x1, 0x3, 0x8}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) mprotect(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) 23:13:28 executing program 0: syz_open_dev$I2C(&(0x7f0000000040), 0x5, 0x2100) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={r1, 0x6, &(0x7f00000001c0)=[0x400, 0x5, 0x6, 0xf000, 0x54, 0xd7d], &(0x7f0000000200), &(0x7f0000000240)=[0x8, 0x6]}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_RETRIES(r0, 0x701, 0x4) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, 0xffffffffffffffff, 0x8000000) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1800, 0x0, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x5, 0x7, 0x6, @vifc_lcl_addr=@rand_addr=0x64010100, @remote}, 0x10) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @local, 0x1, "8973e71bd3e4c39f5738d794fc7af12f6505bd6ed3d3768b89de4a507717fb25", 0x6, 0x1, 0x3, 0x8}, 0x3c) (async, rerun: 64) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async, rerun: 64) mprotect(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x6, 0x6, {{0x14, 0x4, 0x0, 0x5, 0x50, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @remote, {[@ssrr={0x89, 0x1f, 0xfc, [@broadcast, @remote, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @lsrr={0x83, 0x17, 0xd1, [@multicast1, @empty, @remote, @private=0xa010100, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) 23:13:28 executing program 0: syz_open_dev$I2C(&(0x7f0000000040), 0x5, 0x2100) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={r1, 0x6, &(0x7f00000001c0)=[0x400, 0x5, 0x6, 0xf000, 0x54, 0xd7d], &(0x7f0000000200), &(0x7f0000000240)=[0x8, 0x6]}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x6, 0x6, {{0x14, 0x4, 0x0, 0x5, 0x50, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @remote, {[@ssrr={0x89, 0x1f, 0xfc, [@broadcast, @remote, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @lsrr={0x83, 0x17, 0xd1, [@multicast1, @empty, @remote, @private=0xa010100, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 32) 23:13:28 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x5, r3, 0x6, 0x4, 0x2, 0x9, 0x40}) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000180)="c441b9e84700f08092886b77807a0f20c035040000000f22c00fc7af00900000430f0966b812008ee8c461b975c9420f09f30f2d530066ba400066ed", 0x3c}], 0x1, 0x61, &(0x7f0000000200)=[@flags={0x3, 0x82200}, @cr4={0x1, 0x104000}], 0x2) 23:13:28 executing program 0: syz_open_dev$I2C(&(0x7f0000000040), 0x5, 0x2100) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x2, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={r1, 0x6, &(0x7f00000001c0)=[0x400, 0x5, 0x6, 0xf000, 0x54, 0xd7d], &(0x7f0000000200), &(0x7f0000000240)=[0x8, 0x6]}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1800, 0x0, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x5, 0x7, 0x6, @vifc_lcl_addr=@rand_addr=0x64010100, @remote}, 0x10) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @local, 0x1, "8973e71bd3e4c39f5738d794fc7af12f6505bd6ed3d3768b89de4a507717fb25", 0x6, 0x1, 0x3, 0x8}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async, rerun: 64) mprotect(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) (rerun: 64) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x12, r0, 0x876e0000) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000, 0x18000) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8564e0dbc0b78186d4335042b8416", 0xfffffffd, 0x0, 0x0, 0x40000}, 0xfffffffffffffca8) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x3000, 0x3}) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000c, 0x11, r0, 0x9) socket$phonet(0x23, 0x2, 0x1) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f00000000c0)) 23:13:28 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x5, r3, 0x6, 0x4, 0x2, 0x9, 0x40}) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0) (async) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000180)="c441b9e84700f08092886b77807a0f20c035040000000f22c00fc7af00900000430f0966b812008ee8c461b975c9420f09f30f2d530066ba400066ed", 0x3c}], 0x1, 0x61, &(0x7f0000000200)=[@flags={0x3, 0x82200}, @cr4={0x1, 0x104000}], 0x2) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x12, r0, 0x876e0000) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000, 0x18000) 23:13:28 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x5, r3, 0x6, 0x4, 0x2, 0x9, 0x40}) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000180)="c441b9e84700f08092886b77807a0f20c035040000000f22c00fc7af00900000430f0966b812008ee8c461b975c9420f09f30f2d530066ba400066ed", 0x3c}], 0x1, 0x61, &(0x7f0000000200)=[@flags={0x3, 0x82200}, @cr4={0x1, 0x104000}], 0x2) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8564e0dbc0b78186d4335042b8416", 0xfffffffd, 0x0, 0x0, 0x40000}, 0xfffffffffffffca8) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x3000, 0x3}) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000c, 0x11, r0, 0x9) socket$phonet(0x23, 0x2, 0x1) (async) socket$phonet(0x23, 0x2, 0x1) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f00000000c0)) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8564e0dbc0b78186d4335042b8416", 0xfffffffd, 0x0, 0x0, 0x40000}, 0xfffffffffffffca8) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x3000, 0x3}) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000c, 0x11, r0, 0x9) (async) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000c, 0x11, r0, 0x9) socket$phonet(0x23, 0x2, 0x1) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f00000000c0)) (async) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f00000000c0)) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x12, r0, 0x876e0000) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000, 0x18000) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) 23:13:28 executing program 3: ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_MM(0xf, 0x8, &(0x7f0000ffc000/0x2000)=nil) 23:13:28 executing program 3: ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_MM(0xf, 0x8, &(0x7f0000ffc000/0x2000)=nil) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1}) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x41) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x1b08b8239d015bf7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x10, 0xffffffffffffffff, 0x100000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x4202c0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xffff}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) socketpair(0xa, 0x800, 0xffffffff, &(0x7f0000000080)) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x2, 0x4) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) socketpair(0xa, 0x800, 0xffffffff, &(0x7f0000000080)) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x2, 0x4) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x1b08b8239d015bf7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x10, 0xffffffffffffffff, 0x100000000) (async) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x10, 0xffffffffffffffff, 0x100000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x4202c0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x4202c0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xffff}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) (async) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1}) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x41) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1}) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x41) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)) (async) 23:13:28 executing program 3: ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) (async) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_MM(0xf, 0x8, &(0x7f0000ffc000/0x2000)=nil) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x1b08b8239d015bf7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) (async, rerun: 32) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) (async, rerun: 32) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x10, 0xffffffffffffffff, 0x100000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) openat$hwrng(0xffffff9c, &(0x7f0000000280), 0x4202c0, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xffff}) (async, rerun: 64) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) (rerun: 64) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) socketpair(0xa, 0x800, 0xffffffff, &(0x7f0000000080)) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x2, 0x4) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10002, 0x0, &(0x7f0000ffb000/0x2000)=nil}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x2, 0x1000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1}) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x41) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x41) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) syz_io_uring_setup(0x436, &(0x7f0000000040)={0x0, 0x7ca2, 0x80, 0x0, 0x1ff, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x505100) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10002, 0x0, &(0x7f0000ffb000/0x2000)=nil}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x2, 0x1000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78986d4335042b8416", 0x0, 0x2}, 0x3c) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) syz_io_uring_setup(0x436, &(0x7f0000000040)={0x0, 0x7ca2, 0x80, 0x0, 0x1ff, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x505100) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10002, 0x0, &(0x7f0000ffb000/0x2000)=nil}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x2, 0x1000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10002, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x2, 0x1000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) (async) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78986d4335042b8416", 0x0, 0x2}, 0x3c) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78986d4335042b8416", 0x0, 0x2}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78986d4335042b8416", 0x0, 0x2}, 0x3c) (async) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x505100) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x505100) (async) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) syz_io_uring_setup(0x436, &(0x7f0000000040)={0x0, 0x7ca2, 0x80, 0x0, 0x1ff, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x101ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x4200) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @multicast1, 0x0, "0764836fd23f7fffbc2c72e60e13152febb8336e0dbc0b78186d4335841600", 0x0, 0x0, 0x2}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "a866c9a99383a1368c8472c30778d55641ef63ab9a2564fbbc17f4817686c795", 0x2, 0x53d4, 0x8c, 0xfff}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x101ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x101ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x4200) syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x4200) (async) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @multicast1, 0x0, "0764836fd23f7fffbc2c72e60e13152febb8336e0dbc0b78186d4335841600", 0x0, 0x0, 0x2}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "a866c9a99383a1368c8472c30778d55641ef63ab9a2564fbbc17f4817686c795", 0x2, 0x53d4, 0x8c, 0xfff}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x101ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x4200) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @multicast1, 0x0, "0764836fd23f7fffbc2c72e60e13152febb8336e0dbc0b78186d4335841600", 0x0, 0x0, 0x2}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "a866c9a99383a1368c8472c30778d55641ef63ab9a2564fbbc17f4817686c795", 0x2, 0x53d4, 0x8c, 0xfff}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@private=0xa010100, @loopback, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x507000, 0x0) mmap$qrtrtun(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000000, 0x4010, r0, 0x3) 23:13:28 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x507000, 0x0) mmap$qrtrtun(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000000, 0x4010, r0, 0x3) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@private=0xa010100, @loopback, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x507000, 0x0) mmap$qrtrtun(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000000, 0x4010, r0, 0x3) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@private=0xa010100, @loopback, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 1: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:28 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x4) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x2800, 0x112) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd610491}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x81000, 0x0) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, 0xffffffffffffffff, "df7c24ffc38d44841beb8106b50057ab96249098991d3c73e66d2bfc23f15656", 0x3, 0x6, 0x6e, 0x1}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @private=0xa010102, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x50280, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={r1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x1000, 0x7, 0x6, 0x80, 0x441, 0x2, 0x800, 0x4], &(0x7f0000000240)=[0xa5c, 0x200, 0x89d0]}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x0, &(0x7f0000000080), 0x36, 0x1, 0x2, 0x4, 0x6, 0x2, 0x6, 'syz0\x00'}) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async, rerun: 32) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) ioctl$TCSETAF(r2, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, 0xffffffffffffffff, "df7c24ffc38d44841beb8106b50057ab96249098991d3c73e66d2bfc23f15656", 0x3, 0x6, 0x6e, 0x1}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x4) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x2800, 0x112) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd610491}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) (async) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x81000, 0x0) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @private=0xa010102, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, 0xffffffffffffffff, "df7c24ffc38d44841beb8106b50057ab96249098991d3c73e66d2bfc23f15656", 0x3, 0x6, 0x6e, 0x1}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, 0xffffffffffffffff, "df7c24ffc38d44841beb8106b50057ab96249098991d3c73e66d2bfc23f15656", 0x3, 0x6, 0x6e, 0x1}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x50280, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={r1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x1000, 0x7, 0x6, 0x80, 0x441, 0x2, 0x800, 0x4], &(0x7f0000000240)=[0xa5c, 0x200, 0x89d0]}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x0, &(0x7f0000000080), 0x36, 0x1, 0x2, 0x4, 0x6, 0x2, 0x6, 'syz0\x00'}) 23:13:28 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x4) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x2800, 0x112) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd610491}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x81000, 0x0) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDADDIO(r0, 0x4b34, 0x4) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x2800, 0x112) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd610491}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) (async) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x81000, 0x0) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @private=0xa010102, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x50280, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={r1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x1000, 0x7, 0x6, 0x80, 0x441, 0x2, 0x800, 0x4], &(0x7f0000000240)=[0xa5c, 0x200, 0x89d0]}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x0, &(0x7f0000000080), 0x36, 0x1, 0x2, 0x4, 0x6, 0x2, 0x6, 'syz0\x00'}) 23:13:28 executing program 3: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x240, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x54}, 0x2000a810) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4004b100, &(0x7f00000001c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'tunl0\x00'}}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0xbd363000) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@remote, @broadcast, 0x0, "07152febb8566e0dbd0b78186d4335042b841600", 0x0, 0x8}, 0x3c) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) syz_open_dev$ttys(0xc, 0x2, 0x1) 23:13:28 executing program 3: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x240, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x54}, 0x2000a810) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x200000, 0x0) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4004b100, &(0x7f00000001c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'tunl0\x00'}}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0xbd363000) 23:13:28 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x4000) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x65f112a7c6394825, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f00000000c0), 0xfb1, 0x80200) 23:13:28 executing program 3: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x240, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x54}, 0x2000a810) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4004b100, &(0x7f00000001c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'tunl0\x00'}}) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0xbd363000) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@remote, @broadcast, 0x0, "07152febb8566e0dbd0b78186d4335042b841600", 0x0, 0x8}, 0x3c) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x4000) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x65f112a7c6394825, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0xfb1, 0x80200) 23:13:28 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@remote, @broadcast, 0x0, "07152febb8566e0dbd0b78186d4335042b841600", 0x0, 0x8}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff8000/0x6000)=nil) 23:13:28 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x4000) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x65f112a7c6394825, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0xfb1, 0x80200) 23:13:28 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) 23:13:28 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000480)={r1, 0x80000}) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000340), 0x80000, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, r4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x9, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r5], 0x1, 0x800}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x38}, @dev={0xfe, 0x80, '\x00', 0x3e}}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000480)={r1, 0x80000}) (async) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000340), 0x80000, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, r4}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x9, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r5], 0x1, 0x800}) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0xb, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfaf, 0x800) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x81) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x0, 0x20, 0x8, &(0x7f0000000040)={0x7, "dbf80ab2df99e1b76f3f6cd31496c33c50b0a7c2ec7b03a8a3f609563c45cb0faf"}}) 23:13:29 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x38}, @dev={0xfe, 0x80, '\x00', 0x3e}}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x38}, @dev={0xfe, 0x80, '\x00', 0x3e}}) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfaf, 0x800) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x81) (async) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x0, 0x20, 0x8, &(0x7f0000000040)={0x7, "dbf80ab2df99e1b76f3f6cd31496c33c50b0a7c2ec7b03a8a3f609563c45cb0faf"}}) 23:13:29 executing program 3: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000480)={r1, 0x80000}) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000340), 0x80000, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, r4}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x9, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r5], 0x1, 0x800}) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x38}, @dev={0xfe, 0x80, '\x00', 0x3e}}) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfaf, 0x800) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x81) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x0, 0x20, 0x8, &(0x7f0000000040)={0x7, "dbf80ab2df99e1b76f3f6cd31496c33c50b0a7c2ec7b03a8a3f609563c45cb0faf"}}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfaf, 0x800) (async) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x81) (async) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x0, 0x20, 0x8, &(0x7f0000000040)={0x7, "dbf80ab2df99e1b76f3f6cd31496c33c50b0a7c2ec7b03a8a3f609563c45cb0faf"}}) (async) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @remote, 0x1, "0000000000000000e80800000000000000000000000000000000000000000080", 0x3, 0x84, 0x4, 0x80000000}, 0xff99) prctl$PR_SET_MM(0xf, 0xde9bb86c859d43ad, &(0x7f0000ff8000/0x6000)=nil) openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x4, 0x0, 0xfffffffe}, 0x3c) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) shmget(0x1, 0x4000, 0x200, &(0x7f0000ff7000/0x4000)=nil) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast1, @rand_addr=0x64010102, 0x1, "ebdf5cbb4a16773c7d0da7976381c92a814c5dec09c97c01f8d0314c6def4955", 0x40, 0x7, 0x3, 0x7f}, 0x3c) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @remote, 0x1, "0000000000000000e80800000000000000000000000000000000000000000080", 0x3, 0x84, 0x4, 0x80000000}, 0xff99) (async) prctl$PR_SET_MM(0xf, 0xde9bb86c859d43ad, &(0x7f0000ff8000/0x6000)=nil) (async) openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) 23:13:29 executing program 1: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:29 executing program 3: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @remote, 0x1, "0000000000000000e80800000000000000000000000000000000000000000080", 0x3, 0x84, 0x4, 0x80000000}, 0xff99) (async) prctl$PR_SET_MM(0xf, 0xde9bb86c859d43ad, &(0x7f0000ff8000/0x6000)=nil) (async) openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x4, 0x0, 0xfffffffe}, 0x3c) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) shmget(0x1, 0x4000, 0x200, &(0x7f0000ff7000/0x4000)=nil) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast1, @rand_addr=0x64010102, 0x1, "ebdf5cbb4a16773c7d0da7976381c92a814c5dec09c97c01f8d0314c6def4955", 0x40, 0x7, 0x3, 0x7f}, 0x3c) 23:13:29 executing program 1: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x4, 0x0, 0xfffffffe}, 0x3c) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) shmget(0x1, 0x4000, 0x200, &(0x7f0000ff7000/0x4000)=nil) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast1, @rand_addr=0x64010102, 0x1, "ebdf5cbb4a16773c7d0da7976381c92a814c5dec09c97c01f8d0314c6def4955", 0x40, 0x7, 0x3, 0x7f}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x4, 0x0, 0xfffffffe}, 0x3c) (async) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) shmget(0x1, 0x4000, 0x200, &(0x7f0000ff7000/0x4000)=nil) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast1, @rand_addr=0x64010102, 0x1, "ebdf5cbb4a16773c7d0da7976381c92a814c5dec09c97c01f8d0314c6def4955", 0x40, 0x7, 0x3, 0x7f}, 0x3c) (async) 23:13:29 executing program 3: setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xfd, 0x4) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 2: prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xfd, 0x4) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: socket$igmp(0x2, 0x3, 0x2) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10004, 0x0, &(0x7f0000ffd000/0x1000)=nil}) 23:13:29 executing program 2: prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x1, 0x1) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000ffd000/0x1000)=nil}) 23:13:29 executing program 3: setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xfd, 0x4) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0xfd, 0x4) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10004, 0x0, &(0x7f0000ffd000/0x1000)=nil}) 23:13:29 executing program 2: prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x1, 0x1) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000ffd000/0x1000)=nil}) syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x1, 0x1) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000ffd000/0x1000)=nil}) (async) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10004, 0x0, &(0x7f0000ffd000/0x1000)=nil}) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@empty, @dev={0xac, 0x14, 0x14, 0xf}, 0xffffffffffffffff, "d797b3862c56a497fa7f5428adae74af1150c52807dbf6a0fe33dbb3566d2130", 0x3ff, 0x6, 0x2000, 0x7}, 0x3c) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0xa200, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x41001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x54}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd3c}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x14014830}, 0x4004000) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x1, 0x1) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000ffd000/0x1000)=nil}) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @remote, 0x0, "0764776fd23f7fffbe2c7200000000000000000000000000000000002000", 0x0, 0x8, 0xffffffff}, 0x3c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @remote, 0xffffffffffffffff, "112f004c0b303549339f06dc09475231f4f814cdcedc1b6d2ba96b389b171909", 0x1000, 0x8, 0xf1f, 0x6}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@empty, @dev={0xac, 0x14, 0x14, 0xf}, 0xffffffffffffffff, "d797b3862c56a497fa7f5428adae74af1150c52807dbf6a0fe33dbb3566d2130", 0x3ff, 0x6, 0x2000, 0x7}, 0x3c) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0xa200, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x41001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x54}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd3c}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x14014830}, 0x4004000) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd3c}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x14014830}, 0x4004000) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @remote, 0x0, "0764776fd23f7fffbe2c7200000000000000000000000000000000002000", 0x0, 0x8, 0xffffffff}, 0x3c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @remote, 0xffffffffffffffff, "112f004c0b303549339f06dc09475231f4f814cdcedc1b6d2ba96b389b171909", 0x1000, 0x8, 0xf1f, 0x6}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @remote, 0x0, "0764776fd23f7fffbe2c7200000000000000000000000000000000002000", 0x0, 0x8, 0xffffffff}, 0x3c) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @remote, 0xffffffffffffffff, "112f004c0b303549339f06dc09475231f4f814cdcedc1b6d2ba96b389b171909", 0x1000, 0x8, 0xf1f, 0x6}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@empty, @dev={0xac, 0x14, 0x14, 0xf}, 0xffffffffffffffff, "d797b3862c56a497fa7f5428adae74af1150c52807dbf6a0fe33dbb3566d2130", 0x3ff, 0x6, 0x2000, 0x7}, 0x3c) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0xa200, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x41001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x54}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd3c}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x14014830}, 0x4004000) 23:13:29 executing program 3: ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x3, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x8010, r0, 0x1) ioctl$TCSETAF(r0, 0x5408, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000040)="9241904223586fd7f467a450304ef269849921ff3405978f82b4a3faf43d9f4ad1950ee3dbb007726c7fa5e3d10a0aef0cb748e81407a7ded3f13766be0d38d6ddd911475dc356f3ea29d9969768fdd9a41ba65c9fdd779cdacaa54caaae4f7c2f181a484416201403fc39f446781b3d01dcbb869f1f1c7721fd02229fa6a4ce9f03c4c8dea7d57588834a3cd4415f8e83e7b857e075ed0dae29065d01da24", 0x9f, r0}, 0x64) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @remote, 0x0, "0764776fd23f7fffbe2c7200000000000000000000000000000000002000", 0x0, 0x8, 0xffffffff}, 0x3c) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @remote, 0xffffffffffffffff, "112f004c0b303549339f06dc09475231f4f814cdcedc1b6d2ba96b389b171909", 0x1000, 0x8, 0xf1f, 0x6}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x3, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x8010, r0, 0x1) ioctl$TCSETAF(r0, 0x5408, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000040)="9241904223586fd7f467a450304ef269849921ff3405978f82b4a3faf43d9f4ad1950ee3dbb007726c7fa5e3d10a0aef0cb748e81407a7ded3f13766be0d38d6ddd911475dc356f3ea29d9969768fdd9a41ba65c9fdd779cdacaa54caaae4f7c2f181a484416201403fc39f446781b3d01dcbb869f1f1c7721fd02229fa6a4ce9f03c4c8dea7d57588834a3cd4415f8e83e7b857e075ed0dae29065d01da24", 0x9f, r0}, 0x64) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x3, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8}) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x8010, r0, 0x1) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000040)="9241904223586fd7f467a450304ef269849921ff3405978f82b4a3faf43d9f4ad1950ee3dbb007726c7fa5e3d10a0aef0cb748e81407a7ded3f13766be0d38d6ddd911475dc356f3ea29d9969768fdd9a41ba65c9fdd779cdacaa54caaae4f7c2f181a484416201403fc39f446781b3d01dcbb869f1f1c7721fd02229fa6a4ce9f03c4c8dea7d57588834a3cd4415f8e83e7b857e075ed0dae29065d01da24", 0x9f, r0}, 0x64) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 23:13:29 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x3, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x8010, r0, 0x1) ioctl$TCSETAF(r0, 0x5408, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000040)="9241904223586fd7f467a450304ef269849921ff3405978f82b4a3faf43d9f4ad1950ee3dbb007726c7fa5e3d10a0aef0cb748e81407a7ded3f13766be0d38d6ddd911475dc356f3ea29d9969768fdd9a41ba65c9fdd779cdacaa54caaae4f7c2f181a484416201403fc39f446781b3d01dcbb869f1f1c7721fd02229fa6a4ce9f03c4c8dea7d57588834a3cd4415f8e83e7b857e075ed0dae29065d01da24", 0x9f, r0}, 0x64) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x3, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8}) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x8010, r0, 0x1) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000040)="9241904223586fd7f467a450304ef269849921ff3405978f82b4a3faf43d9f4ad1950ee3dbb007726c7fa5e3d10a0aef0cb748e81407a7ded3f13766be0d38d6ddd911475dc356f3ea29d9969768fdd9a41ba65c9fdd779cdacaa54caaae4f7c2f181a484416201403fc39f446781b3d01dcbb869f1f1c7721fd02229fa6a4ce9f03c4c8dea7d57588834a3cd4415f8e83e7b857e075ed0dae29065d01da24", 0x9f, r0}, 0x64) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1}) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x400000) 23:13:29 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 3: setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0xffffffff, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x40000) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x400000) 23:13:29 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1}) 23:13:29 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x400000) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x400000) 23:13:29 executing program 3: setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0xffffffff, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x40000) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0xffffffff, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x40000) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async) 23:13:29 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1}) 23:13:29 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xe135, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x8000, @vifc_lcl_ifindex=r2, @loopback}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'ip_vti0\x00', r2, 0x80, 0x80, 0xea2, 0x7, {{0x34, 0x4, 0x1, 0x7, 0xd0, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x18, 0xcc, 0x0, 0x0, [0x800, 0x7, 0x6, 0x8, 0x3f]}, @timestamp_addr={0x44, 0x34, 0xeb, 0x1, 0x1, [{@rand_addr=0x64010101, 0x6180}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x69}, {@empty, 0x2}, {@local, 0x8000}, {@private=0xa010100, 0x4}, {@multicast1, 0xdbf1}]}, @timestamp_addr={0x44, 0x54, 0x19, 0x1, 0x2, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x8}, {@multicast1, 0x40}, {@multicast1, 0x10001}, {@multicast1, 0x2}, {@rand_addr=0x64010100, 0x5}, {@multicast2, 0x6}, {@loopback, 0xe4}, {@empty, 0xffffffff}, {@multicast1, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x29, 0x1, 0x3, [{@remote, 0x9}, {@empty, 0x7}]}, @lsrr={0x83, 0x7, 0xc3, [@local]}]}}}}}) 23:13:29 executing program 3: setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0xffffffff, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) (async, rerun: 32) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x40000) (async, rerun: 64) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 23:13:29 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 2: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000080), 0xc4181, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$KDENABIO(r0, 0x4b36) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xe135, 0x4) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x8000, @vifc_lcl_ifindex=r2, @loopback}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'ip_vti0\x00', r2, 0x80, 0x80, 0xea2, 0x7, {{0x34, 0x4, 0x1, 0x7, 0xd0, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x18, 0xcc, 0x0, 0x0, [0x800, 0x7, 0x6, 0x8, 0x3f]}, @timestamp_addr={0x44, 0x34, 0xeb, 0x1, 0x1, [{@rand_addr=0x64010101, 0x6180}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x69}, {@empty, 0x2}, {@local, 0x8000}, {@private=0xa010100, 0x4}, {@multicast1, 0xdbf1}]}, @timestamp_addr={0x44, 0x54, 0x19, 0x1, 0x2, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x8}, {@multicast1, 0x40}, {@multicast1, 0x10001}, {@multicast1, 0x2}, {@rand_addr=0x64010100, 0x5}, {@multicast2, 0x6}, {@loopback, 0xe4}, {@empty, 0xffffffff}, {@multicast1, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x29, 0x1, 0x3, [{@remote, 0x9}, {@empty, 0x7}]}, @lsrr={0x83, 0x7, 0xc3, [@local]}]}}}}}) 23:13:29 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 2: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000080), 0xc4181, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: socketpair(0x28, 0x80000, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@none, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xe135, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x8000, @vifc_lcl_ifindex=r2, @loopback}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'ip_vti0\x00', r2, 0x80, 0x80, 0xea2, 0x7, {{0x34, 0x4, 0x1, 0x7, 0xd0, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x18, 0xcc, 0x0, 0x0, [0x800, 0x7, 0x6, 0x8, 0x3f]}, @timestamp_addr={0x44, 0x34, 0xeb, 0x1, 0x1, [{@rand_addr=0x64010101, 0x6180}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x69}, {@empty, 0x2}, {@local, 0x8000}, {@private=0xa010100, 0x4}, {@multicast1, 0xdbf1}]}, @timestamp_addr={0x44, 0x54, 0x19, 0x1, 0x2, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x8}, {@multicast1, 0x40}, {@multicast1, 0x10001}, {@multicast1, 0x2}, {@rand_addr=0x64010100, 0x5}, {@multicast2, 0x6}, {@loopback, 0xe4}, {@empty, 0xffffffff}, {@multicast1, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x29, 0x1, 0x3, [{@remote, 0x9}, {@empty, 0x7}]}, @lsrr={0x83, 0x7, 0xc3, [@local]}]}}}}}) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x7}) 23:13:29 executing program 3: socketpair(0x28, 0x80000, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@none, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 2: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000080), 0xc4181, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$KDENABIO(r0, 0x4b36) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$ptmx(0xffffff9c, &(0x7f0000000080), 0xc4181, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x8, 0x10800) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async, rerun: 32) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async, rerun: 32) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x7}) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prctl$PR_SET_MM(0xf, 0x5, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: socketpair(0x28, 0x80000, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@none, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) socketpair(0x28, 0x80000, 0x8, &(0x7f0000000000)) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@none, 0x1}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x8, 0x10800) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x8, 0x10800) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x7}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x7}) (async) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) prctl$PR_SET_MM(0xf, 0x5, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x8, 0x10800) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x30, 0xffffffffffffffff, 0x8000000) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) prctl$PR_SET_MM(0xf, 0x5, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) 23:13:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0x7, r1, 0x0, 0xfbfbfbfb}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x30, 0xffffffffffffffff, 0x8000000) 23:13:29 executing program 2: remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x80000000, 0x8000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x401, 0x10000) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x30, 0xffffffffffffffff, 0x8000000) 23:13:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0x7, r1, 0x0, 0xfbfbfbfb}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0x7, r1, 0x0, 0xfbfbfbfb}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) 23:13:29 executing program 2: remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x80000000, 0x8000) (async) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x80000000, 0x8000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x401, 0x10000) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x2, 0xd000, 0x2000, &(0x7f0000ffa000/0x2000)=nil}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r1, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) 23:13:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000040)={0x7, r1, 0x0, 0xfbfbfbfb}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:29 executing program 2: remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x80000000, 0x8000) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x401, 0x10000) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x2, 0xd000, 0x2000, &(0x7f0000ffa000/0x2000)=nil}) (async) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r1, 0x0) (async) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) msync(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) (rerun: 32) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x7, 0x2}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000440)={0x1, 0x0, 0x3, 0x9, 0x427, 0x80, 0x73, 0xd732, 0x2}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9eebad69afbf7f66}, 0x80000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/164, 0xa4, 0x0, &(0x7f0000000240)=""/234, 0xea}, &(0x7f0000000180)=0x40) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x2) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x8000, @vifc_lcl_addr=@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x0) (async, rerun: 64) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x2, 0xd000, 0x2000, &(0x7f0000ffa000/0x2000)=nil}) (async) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r1, 0x0) (async) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x7, 0x2}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000440)={0x1, 0x0, 0x3, 0x9, 0x427, 0x80, 0x73, 0xd732, 0x2}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9eebad69afbf7f66}, 0x80000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/164, 0xa4, 0x0, &(0x7f0000000240)=""/234, 0xea}, &(0x7f0000000180)=0x40) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x2) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x2) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x8000, @vifc_lcl_addr=@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x8000, @vifc_lcl_addr=@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x7, 0x2}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x7, 0x2}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r0) (async, rerun: 32) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) ioctl$TCSETAF(r2, 0x5408, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000440)={0x1, 0x0, 0x3, 0x9, 0x427, 0x80, 0x73, 0xd732, 0x2}) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9eebad69afbf7f66}, 0x80000) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/164, 0xa4, 0x0, &(0x7f0000000240)=""/234, 0xea}, &(0x7f0000000180)=0x40) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x2) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x3, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000004, 0x4010, r0, 0x1f303000) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x8000, @vifc_lcl_addr=@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x3, &(0x7f0000ffb000/0x4000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000004, 0x4010, r0, 0x1f303000) 23:13:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000040)="cec0e488267b8d82937de8118e00ce708dd9d951f6e4c046d090107cab6a67ed85d9630a6022ec2f321bfda859b150ef8ed2c3bcb680be9b0c2e70fea2cf266465500af2d86b4536ba3545d6d398bf8d65c43d39c055f48be1c336", 0x5b}, 0x64) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x3, &(0x7f0000ffb000/0x4000)=nil) (async) prctl$PR_SET_MM(0xf, 0x3, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000004, 0x4010, r0, 0x1f303000) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000040)="cec0e488267b8d82937de8118e00ce708dd9d951f6e4c046d090107cab6a67ed85d9630a6022ec2f321bfda859b150ef8ed2c3bcb680be9b0c2e70fea2cf266465500af2d86b4536ba3545d6d398bf8d65c43d39c055f48be1c336", 0x5b}, 0x64) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000040)="cec0e488267b8d82937de8118e00ce708dd9d951f6e4c046d090107cab6a67ed85d9630a6022ec2f321bfda859b150ef8ed2c3bcb680be9b0c2e70fea2cf266465500af2d86b4536ba3545d6d398bf8d65c43d39c055f48be1c336", 0x5b}, 0x64) (async) 23:13:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000040)="cec0e488267b8d82937de8118e00ce708dd9d951f6e4c046d090107cab6a67ed85d9630a6022ec2f321bfda859b150ef8ed2c3bcb680be9b0c2e70fea2cf266465500af2d86b4536ba3545d6d398bf8d65c43d39c055f48be1c336", 0x5b}, 0x64) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x4ce00, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x40010, r0, 0x180000000) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xffffffff, 0x4) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xffffffff, 0x4) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: pipe2$watch_queue(&(0x7f0000000040), 0x80) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="d403d8840000000f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000100070000004017a59c22451d00540065000081299078e0000001ac1414bb863f00000001010c873381492d0f8798db3d050637601598000eb5917c7286319f65c93aadcd0209b0349216494c3d00038e050de9177c3bac87fcfff77d2e00"]}) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000ff7000/0x4000)=nil}) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x4ce00, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x40010, r0, 0x180000000) (async) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x40010, r0, 0x180000000) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xffffffff, 0x4) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xffffffff, 0x4) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 1: pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="d403d8840000000f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000100070000004017a59c22451d00540065000081299078e0000001ac1414bb863f00000001010c873381492d0f8798db3d050637601598000eb5917c7286319f65c93aadcd0209b0349216494c3d00038e050de9177c3bac87fcfff77d2e00"]}) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x4ce00, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x40010, r0, 0x180000000) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000ff7000/0x4000)=nil}) 23:13:29 executing program 1: pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="d403d8840000000f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000100070000004017a59c22451d00540065000081299078e0000001ac1414bb863f00000001010c873381492d0f8798db3d050637601598000eb5917c7286319f65c93aadcd0209b0349216494c3d00038e050de9177c3bac87fcfff77d2e00"]}) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/209, 0xd1, 0x1, &(0x7f0000000140)=""/177, 0xb1}, &(0x7f0000000240)=0x40) 23:13:29 executing program 3: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, 0x400, 0x0, 0x4d}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000ff7000/0x4000)=nil}) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/209, 0xd1, 0x1, &(0x7f0000000140)=""/177, 0xb1}, &(0x7f0000000240)=0x40) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/209, 0xd1, 0x1, &(0x7f0000000140)=""/177, 0xb1}, &(0x7f0000000240)=0x40) (async) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x8, 0x2) ioctl$I2C_TIMEOUT(r0, 0x702, 0xffff2c20) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x1, &(0x7f0000000080)={0x2, "95471ac990317d20196a2fae187d1d96ab83697aec5354f0a84e12025ad5ea11f1"}}) 23:13:29 executing program 2: syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) 23:13:29 executing program 3: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, 0x400, 0x0, 0x4d}) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x8, 0x2) ioctl$I2C_TIMEOUT(r0, 0x702, 0xffff2c20) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x1, &(0x7f0000000080)={0x2, "95471ac990317d20196a2fae187d1d96ab83697aec5354f0a84e12025ad5ea11f1"}}) 23:13:29 executing program 2: syz_open_dev$ptys(0xc, 0x3, 0x1) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) 23:13:29 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/209, 0xd1, 0x1, &(0x7f0000000140)=""/177, 0xb1}, &(0x7f0000000240)=0x40) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/209, 0xd1, 0x1, &(0x7f0000000140)=""/177, 0xb1}, &(0x7f0000000240)=0x40) (async) 23:13:29 executing program 3: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, 0x400, 0x0, 0x4d}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, 0x400, 0x0, 0x4d}) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:29 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x8, 0x2) ioctl$I2C_TIMEOUT(r0, 0x702, 0xffff2c20) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x1, &(0x7f0000000080)={0x2, "95471ac990317d20196a2fae187d1d96ab83697aec5354f0a84e12025ad5ea11f1"}}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x8, 0x2) (async) ioctl$I2C_TIMEOUT(r0, 0x702, 0xffff2c20) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x1, &(0x7f0000000080)={0x2, "95471ac990317d20196a2fae187d1d96ab83697aec5354f0a84e12025ad5ea11f1"}}) (async) 23:13:29 executing program 2: syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80000001, 0x40000) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x81) mmap$snddsp_status(&(0x7f0000ff3000/0xd000)=nil, 0x1000, 0x200000e, 0x100010, 0xffffffffffffffff, 0x82000000) 23:13:29 executing program 0: prctl$PR_SET_MM(0x1d, 0xd, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000fff000/0x1000)=nil) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @broadcast, 0x1, "0764836fe53f7fffbe2c72e60e13152febb8566e0dac0b78186d4335042b8416", 0x10000, 0x3f}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4004b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="7882c07665c0", 'veth1_to_batadv\x00'}}) syz_open_dev$usbmon(&(0x7f00000010c0), 0x100, 0x80000) syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x101780) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) sendto$l2tp6(r0, &(0x7f00000000c0)="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", 0x1000, 0x1, 0x0, 0x0) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80000001, 0x40000) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x81) mmap$snddsp_status(&(0x7f0000ff3000/0xd000)=nil, 0x1000, 0x200000e, 0x100010, 0xffffffffffffffff, 0x82000000) 23:13:29 executing program 0: prctl$PR_SET_MM(0x1d, 0xd, &(0x7f0000ff8000/0x6000)=nil) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000fff000/0x1000)=nil) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @broadcast, 0x1, "0764836fe53f7fffbe2c72e60e13152febb8566e0dac0b78186d4335042b8416", 0x10000, 0x3f}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @broadcast, 0x1, "0764836fe53f7fffbe2c72e60e13152febb8566e0dac0b78186d4335042b8416", 0x10000, 0x3f}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4004b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="7882c07665c0", 'veth1_to_batadv\x00'}}) syz_open_dev$usbmon(&(0x7f00000010c0), 0x100, 0x80000) syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x101780) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) sendto$l2tp6(r0, &(0x7f00000000c0)="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", 0x1000, 0x1, 0x0, 0x0) (async) sendto$l2tp6(r0, &(0x7f00000000c0)="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", 0x1000, 0x1, 0x0, 0x0) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80000001, 0x40000) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x81) (async) mmap$snddsp_status(&(0x7f0000ff3000/0xd000)=nil, 0x1000, 0x200000e, 0x100010, 0xffffffffffffffff, 0x82000000) 23:13:29 executing program 0: prctl$PR_SET_MM(0x1d, 0xd, &(0x7f0000ff8000/0x6000)=nil) (async, rerun: 32) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (rerun: 32) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000fff000/0x1000)=nil) 23:13:29 executing program 1: ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4004b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="7882c07665c0", 'veth1_to_batadv\x00'}}) (async) syz_open_dev$usbmon(&(0x7f00000010c0), 0x100, 0x80000) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x101780) (async) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) sendto$l2tp6(r0, &(0x7f00000000c0)="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", 0x1000, 0x1, 0x0, 0x0) 23:13:29 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @broadcast, 0x1, "0764836fe53f7fffbe2c72e60e13152febb8566e0dac0b78186d4335042b8416", 0x10000, 0x3f}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x8, 0x8201) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x258) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60ea8566e0dbc0b68186d4335042b84160000001e", 0x1, 0x0, 0xfffffffc, 0x3ff}, 0x3c) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) 23:13:29 executing program 2: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x2}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)="a721fa5c2bf55442753d808c0d44c8b5739f959e72214865b551e9c988cdd8f99b0b9624d98bdd8ab51f6eb350db7ddaa3fdbd0742d4bfb9b5b2b9804151da251ac7bd330a9f7ae870c72483ef0ae40381d95410d59053122e3897f12740481c7c69879a2aab7edab25d2f3239d0ece57c89d7a1f25959c2f511385dd15c3d0d31bc13b09514f9525f0a2cc2d220198c743cd54e18ad1625", 0x98, r0}, 0x64) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:29 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x8, 0x8201) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x258) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60ea8566e0dbc0b68186d4335042b84160000001e", 0x1, 0x0, 0xfffffffc, 0x3ff}, 0x3c) (async) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) socket$inet6_udp(0xa, 0x2, 0x0) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 2: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x2}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:29 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)="a721fa5c2bf55442753d808c0d44c8b5739f959e72214865b551e9c988cdd8f99b0b9624d98bdd8ab51f6eb350db7ddaa3fdbd0742d4bfb9b5b2b9804151da251ac7bd330a9f7ae870c72483ef0ae40381d95410d59053122e3897f12740481c7c69879a2aab7edab25d2f3239d0ece57c89d7a1f25959c2f511385dd15c3d0d31bc13b09514f9525f0a2cc2d220198c743cd54e18ad1625", 0x98, r0}, 0x64) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:29 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x8, 0x8201) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x258) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60ea8566e0dbc0b68186d4335042b84160000001e", 0x1, 0x0, 0xfffffffc, 0x3ff}, 0x3c) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x8, 0x8201) (async) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x258) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60ea8566e0dbc0b68186d4335042b84160000001e", 0x1, 0x0, 0xfffffffc, 0x3ff}, 0x3c) (async) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 23:13:29 executing program 3: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 2: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x2}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x2}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)="a721fa5c2bf55442753d808c0d44c8b5739f959e72214865b551e9c988cdd8f99b0b9624d98bdd8ab51f6eb350db7ddaa3fdbd0742d4bfb9b5b2b9804151da251ac7bd330a9f7ae870c72483ef0ae40381d95410d59053122e3897f12740481c7c69879a2aab7edab25d2f3239d0ece57c89d7a1f25959c2f511385dd15c3d0d31bc13b09514f9525f0a2cc2d220198c743cd54e18ad1625", 0x98, r0}, 0x64) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)="a721fa5c2bf55442753d808c0d44c8b5739f959e72214865b551e9c988cdd8f99b0b9624d98bdd8ab51f6eb350db7ddaa3fdbd0742d4bfb9b5b2b9804151da251ac7bd330a9f7ae870c72483ef0ae40381d95410d59053122e3897f12740481c7c69879a2aab7edab25d2f3239d0ece57c89d7a1f25959c2f511385dd15c3d0d31bc13b09514f9525f0a2cc2d220198c743cd54e18ad1625", 0x98, r0}, 0x64) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ffd000/0x3000)=nil) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @local, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x43}, 0xffffffffffffffff, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x2}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @local, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ffd000/0x3000)=nil) 23:13:30 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) sendto$l2tp6(r0, &(0x7f0000000080)="cb0863293998f2c7fe4751b040058edebb6bd8dff667d930de9cbd43add7da4edcd8aedfa2ba7da3000037025f7d6fbbd4c0ee8c8d9c39e6599d3b467508700fe72f64a26614871a341a036b01670e6a07dd20a41f91e9069634c7f370b6b11ba248c4f3eedee0bf925e0a9b62303794d568664ae5030f4cd89ce4265104c26baef81a1b99d38a3a1ac0f34e2c3aa72403885c8792abaa5f44d989a1a0d364c4db32acdf1d4f4c9e9d0c44fcda6060fb859a4bd44477050d06b347796c04c8", 0xbf, 0x80, &(0x7f0000000000)={0xa, 0x0, 0xdf5b, @loopback, 0x8, 0x2}, 0x20) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x442100, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000180)={0x6, 0x7b}) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x600, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, "912cc32170801a7677f3b036198b3e26d5c8651a0055509ea927daf50de038f3", 0x369c, 0x3, 0x7, 0x70}, 0x3c) syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x0) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x43}, 0xffffffffffffffff, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x2}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x43}, 0xffffffffffffffff, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x2}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @local, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) 23:13:30 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) sendto$l2tp6(r0, &(0x7f0000000080)="cb0863293998f2c7fe4751b040058edebb6bd8dff667d930de9cbd43add7da4edcd8aedfa2ba7da3000037025f7d6fbbd4c0ee8c8d9c39e6599d3b467508700fe72f64a26614871a341a036b01670e6a07dd20a41f91e9069634c7f370b6b11ba248c4f3eedee0bf925e0a9b62303794d568664ae5030f4cd89ce4265104c26baef81a1b99d38a3a1ac0f34e2c3aa72403885c8792abaa5f44d989a1a0d364c4db32acdf1d4f4c9e9d0c44fcda6060fb859a4bd44477050d06b347796c04c8", 0xbf, 0x80, &(0x7f0000000000)={0xa, 0x0, 0xdf5b, @loopback, 0x8, 0x2}, 0x20) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x442100, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000180)={0x6, 0x7b}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x600, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, "912cc32170801a7677f3b036198b3e26d5c8651a0055509ea927daf50de038f3", 0x369c, 0x3, 0x7, 0x70}, 0x3c) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x0) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ffd000/0x3000)=nil) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x43}, 0xffffffffffffffff, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x2}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x43}, 0xffffffffffffffff, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0x2}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:30 executing program 0: openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) shmget(0x2, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) 23:13:30 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) sendto$l2tp6(r0, &(0x7f0000000080)="cb0863293998f2c7fe4751b040058edebb6bd8dff667d930de9cbd43add7da4edcd8aedfa2ba7da3000037025f7d6fbbd4c0ee8c8d9c39e6599d3b467508700fe72f64a26614871a341a036b01670e6a07dd20a41f91e9069634c7f370b6b11ba248c4f3eedee0bf925e0a9b62303794d568664ae5030f4cd89ce4265104c26baef81a1b99d38a3a1ac0f34e2c3aa72403885c8792abaa5f44d989a1a0d364c4db32acdf1d4f4c9e9d0c44fcda6060fb859a4bd44477050d06b347796c04c8", 0xbf, 0x80, &(0x7f0000000000)={0xa, 0x0, 0xdf5b, @loopback, 0x8, 0x2}, 0x20) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x442100, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000180)={0x6, 0x7b}) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x600, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, "912cc32170801a7677f3b036198b3e26d5c8651a0055509ea927daf50de038f3", 0x369c, 0x3, 0x7, 0x70}, 0x3c) syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) sendto$l2tp6(r0, &(0x7f0000000080)="cb0863293998f2c7fe4751b040058edebb6bd8dff667d930de9cbd43add7da4edcd8aedfa2ba7da3000037025f7d6fbbd4c0ee8c8d9c39e6599d3b467508700fe72f64a26614871a341a036b01670e6a07dd20a41f91e9069634c7f370b6b11ba248c4f3eedee0bf925e0a9b62303794d568664ae5030f4cd89ce4265104c26baef81a1b99d38a3a1ac0f34e2c3aa72403885c8792abaa5f44d989a1a0d364c4db32acdf1d4f4c9e9d0c44fcda6060fb859a4bd44477050d06b347796c04c8", 0xbf, 0x80, &(0x7f0000000000)={0xa, 0x0, 0xdf5b, @loopback, 0x8, 0x2}, 0x20) (async) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x442100, 0x0) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000180)={0x6, 0x7b}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x600, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, "912cc32170801a7677f3b036198b3e26d5c8651a0055509ea927daf50de038f3", 0x369c, 0x3, 0x7, 0x70}, 0x3c) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x0) (async) 23:13:30 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000080)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x5) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 0: openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) shmget(0x2, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) 23:13:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000240)={0x3, r1}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000280)={0x24eb, 0x0, &(0x7f0000fff000/0x1000)=nil}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x412, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x42fe11f9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) shmget(0x2, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) 23:13:30 executing program 0: openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000080)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) ioctl$TCSBRKP(r2, 0x5425, 0x5) (async, rerun: 64) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (rerun: 64) 23:13:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000240)={0x3, r1}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000280)={0x24eb, 0x0, &(0x7f0000fff000/0x1000)=nil}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x412, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x42fe11f9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000240)={0x3, r1}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) pipe2$watch_queue(&(0x7f00000001c0), 0x80) (async) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000280)={0x24eb, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x412, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x42fe11f9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x1, 0x5, 0x27}) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000080)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x5) (async, rerun: 32) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (rerun: 32) 23:13:30 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000240)={0x3, r1}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0), 0x80) (async) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000280)={0x24eb, 0x0, &(0x7f0000fff000/0x1000)=nil}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x412, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x42fe11f9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x1, 0x5, 0x27}) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{}, {}, {@fixed}]}) 23:13:30 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)=0x8) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10804) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x1, 0x5, 0x27}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x1, 0x5, 0x27}) (async) 23:13:30 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000080), 0x5, 0x0) prctl$PR_SET_MM(0xf, 0x7, &(0x7f0000ff7000/0x3000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x200, 0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x3000)=nil, 0x3000}, 0x5}) 23:13:30 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)=0x8) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10804) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)=0x8) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10804) (async) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{}, {}, {@fixed}]}) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x5, &(0x7f0000ffc000/0x4000)=nil) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{}, {}, {@fixed}]}) 23:13:30 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 64) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)=0x8) (async, rerun: 64) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10804) 23:13:30 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000080), 0x5, 0x0) prctl$PR_SET_MM(0xf, 0x7, &(0x7f0000ff7000/0x3000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x200, 0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x3000)=nil, 0x3000}, 0x5}) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x202000) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x5, &(0x7f0000ffc000/0x4000)=nil) (async) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e138b09333ee7f7d6e70b78186d4335042b8416", 0x0, 0x0, 0x3403c06d, 0x8000}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000080), 0x5, 0x0) prctl$PR_SET_MM(0xf, 0x7, &(0x7f0000ff7000/0x3000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x200, 0x8) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x200, 0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x3000)=nil, 0x3000}, 0x5}) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x202000) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x5, &(0x7f0000ffc000/0x4000)=nil) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x5, &(0x7f0000ffc000/0x4000)=nil) (async) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) (async) 23:13:30 executing program 3: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) userfaultfd(0x800) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e138b09333ee7f7d6e70b78186d4335042b8416", 0x0, 0x0, 0x3403c06d, 0x8000}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x202000) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x202000) (async) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0xa01c1, 0x1a) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x8, 0x8c, 0xeb3, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x9) ioctl$TCSETAF(r2, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000140)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "9d74c2b5c5d9f490d83a5b6034e6d3122a8f5c0ca267ae1e15c8bed8ae34a79f", 0x3ff, 0xa73, 0x2296, 0x81}, 0x3c) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10003b2b}) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x9) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) userfaultfd(0x800) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x220080, 0x0) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e138b09333ee7f7d6e70b78186d4335042b8416", 0x0, 0x0, 0x3403c06d, 0x8000}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x220080, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x220080, 0x0) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0xa01c1, 0x1a) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x8, 0x8c, 0xeb3, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x9) ioctl$TCSETAF(r2, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000140)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "9d74c2b5c5d9f490d83a5b6034e6d3122a8f5c0ca267ae1e15c8bed8ae34a79f", 0x3ff, 0xa73, 0x2296, 0x81}, 0x3c) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10003b2b}) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x9) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0xa01c1, 0x1a) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x8, 0x8c, 0xeb3, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r3, 0x5408, 0x0) (async) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x9) (async) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000140)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "9d74c2b5c5d9f490d83a5b6034e6d3122a8f5c0ca267ae1e15c8bed8ae34a79f", 0x3ff, 0xa73, 0x2296, 0x81}, 0x3c) (async) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10003b2b}) (async) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x9) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1}) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:30 executing program 3: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) userfaultfd(0x800) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) (async) userfaultfd(0x800) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x1000)=nil}) socket$l2tp6(0xa, 0x2, 0x73) mmap$usbfs(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x6) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x4000)=nil) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x220080, 0x0) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0xa01c1, 0x1a) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x8, 0x8c, 0xeb3, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x9) ioctl$TCSETAF(r2, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000140)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "9d74c2b5c5d9f490d83a5b6034e6d3122a8f5c0ca267ae1e15c8bed8ae34a79f", 0x3ff, 0xa73, 0x2296, 0x81}, 0x3c) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10003b2b}) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x9) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000080), 0xa01c1, 0x1a) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x8, 0x8c, 0xeb3, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r3, 0x5408, 0x0) (async) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x9) (async) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000140)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "9d74c2b5c5d9f490d83a5b6034e6d3122a8f5c0ca267ae1e15c8bed8ae34a79f", 0x3ff, 0xa73, 0x2296, 0x81}, 0x3c) (async) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10003b2b}) (async) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x9) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)={0x1}) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="dfe00f79e066ba4100b010ee9a0e0000005b00eaa0000000e1003e0f090f01cbc4e1fc5277000f080fb537", 0x2b}], 0x1, 0x8, &(0x7f0000000080), 0x0) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x1000)=nil}) socket$l2tp6(0xa, 0x2, 0x73) (async) mmap$usbfs(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x6) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x4000)=nil) 23:13:30 executing program 1: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000007e545fb21cd8c24da4c60921f7397517f84dc244e7d97b", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="08003e005f000000050035005d0000000500370001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, 0xffffffffffffffff, "5abe61ed1f0b96a5580405000000c00000000000000000000700", 0xb15, 0x100000, 0xa0, 0x6}, 0x1e) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000240)={@local, @empty, 0x0, "5940c09deafd958010d29ef896008e0b3dde9d4b3ea1981f0746b589703b0391", 0xf8, 0x2, 0x5, 0x7f}, 0x3c) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000007c0)={0x3, 0x0, 0x5, 0x16, 0x16, &(0x7f00000003c0)}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x8041) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r5, r8, 0x0, 0x3, 0x101, 0x6, 0x5, 0x7ff, 0x85, 0x400, 0xffff}) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x1000)=nil}) socket$l2tp6(0xa, 0x2, 0x73) (async) mmap$usbfs(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x6) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x4000)=nil) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@private1, @mcast1}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000280)=0xfe, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0xfc44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r4, 0x30b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = openat$vcsu(0xffffff9c, &(0x7f00000001c0), 0x688000, 0x0) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, &(0x7f0000000240)=0x1, 0x4) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000000) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="dfe00f79e066ba4100b010ee9a0e0000005b00eaa0000000e1003e0f090f01cbc4e1fc5277000f080fb537", 0x2b}], 0x1, 0x8, &(0x7f0000000080), 0x0) 23:13:30 executing program 1: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000007e545fb21cd8c24da4c60921f7397517f84dc244e7d97b", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="08003e005f000000050035005d0000000500370001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, 0xffffffffffffffff, "5abe61ed1f0b96a5580405000000c00000000000000000000700", 0xb15, 0x100000, 0xa0, 0x6}, 0x1e) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000240)={@local, @empty, 0x0, "5940c09deafd958010d29ef896008e0b3dde9d4b3ea1981f0746b589703b0391", 0xf8, 0x2, 0x5, 0x7f}, 0x3c) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000007c0)={0x3, 0x0, 0x5, 0x16, 0x16, &(0x7f00000003c0)}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x8041) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r5, r8, 0x0, 0x3, 0x101, 0x6, 0x5, 0x7ff, 0x85, 0x400, 0xffff}) 23:13:30 executing program 2: mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x4000010, 0xffffffffffffffff, 0xbe7f4000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@private1, @mcast1}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000280)=0xfe, 0x4) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0xfc44}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r4, 0x30b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async) r6 = openat$vcsu(0xffffff9c, &(0x7f00000001c0), 0x688000, 0x0) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, &(0x7f0000000240)=0x1, 0x4) (async) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000000) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="dfe00f79e066ba4100b010ee9a0e0000005b00eaa0000000e1003e0f090f01cbc4e1fc5277000f080fb537", 0x2b}], 0x1, 0x8, &(0x7f0000000080), 0x0) 23:13:30 executing program 1: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000007e545fb21cd8c24da4c60921f7397517f84dc244e7d97b", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="08003e005f000000050035005d0000000500370001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, 0xffffffffffffffff, "5abe61ed1f0b96a5580405000000c00000000000000000000700", 0xb15, 0x100000, 0xa0, 0x6}, 0x1e) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000240)={@local, @empty, 0x0, "5940c09deafd958010d29ef896008e0b3dde9d4b3ea1981f0746b589703b0391", 0xf8, 0x2, 0x5, 0x7f}, 0x3c) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, 0x0) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000007c0)={0x3, 0x0, 0x5, 0x16, 0x16, &(0x7f00000003c0)}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x8041) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r5, r8, 0x0, 0x3, 0x101, 0x6, 0x5, 0x7ff, 0x85, 0x400, 0xffff}) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff8000/0x6000)=nil) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) 23:13:30 executing program 2: mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x4000010, 0xffffffffffffffff, 0xbe7f4000) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="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", 0x1000, 0xfffffffffffffffb) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x109800) syz_open_dev$usbfs(&(0x7f00000010c0), 0xffffffff, 0x8800) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff8000/0x6000)=nil) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) (async) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@private1, @mcast1}) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000280)=0xfe, 0x4) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0xfc44}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r4, 0x30b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async) r6 = openat$vcsu(0xffffff9c, &(0x7f00000001c0), 0x688000, 0x0) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, &(0x7f0000000240)=0x1, 0x4) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000000) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 2: mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x4000010, 0xffffffffffffffff, 0xbe7f4000) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x4, &(0x7f0000ff8000/0x6000)=nil) (async) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) 23:13:30 executing program 1: add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="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", 0x1000, 0xfffffffffffffffb) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x109800) (async) syz_open_dev$usbfs(&(0x7f00000010c0), 0xffffffff, 0x8800) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x80000003}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @private=0xa010102, 0x0, "db64836fd23d7fffbe2c72e60e130dbc0b78186d4f35040084162000", 0x4}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="3ef267dc2e4340262e2aa8bcffffff1581000000660fc7360f009983b7000065670f219dc4c245cf8cdf02000000f20f7ceef30f093e0f09", 0x38}], 0x1, 0x2, &(0x7f0000000080)=[@cstype3={0x5, 0x6}, @vmwrite={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x6}], 0x2) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x80000003}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x80000003}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @private=0xa010102, 0x0, "db64836fd23d7fffbe2c72e60e130dbc0b78186d4f35040084162000", 0x4}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) 23:13:30 executing program 1: add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="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", 0x1000, 0xfffffffffffffffb) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x109800) (rerun: 64) syz_open_dev$usbfs(&(0x7f00000010c0), 0xffffffff, 0x8800) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="3ef267dc2e4340262e2aa8bcffffff1581000000660fc7360f009983b7000065670f219dc4c245cf8cdf02000000f20f7ceef30f093e0f09", 0x38}], 0x1, 0x2, &(0x7f0000000080)=[@cstype3={0x5, 0x6}, @vmwrite={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x6}], 0x2) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@local, @private=0xa010102, 0x0, "db64836fd23d7fffbe2c72e60e130dbc0b78186d4f35040084162000", 0x4}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x80000003}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: socket$xdp(0x2c, 0x3, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="3ef267dc2e4340262e2aa8bcffffff1581000000660fc7360f009983b7000065670f219dc4c245cf8cdf02000000f20f7ceef30f093e0f09", 0x38}], 0x1, 0x2, &(0x7f0000000080)=[@cstype3={0x5, 0x6}, @vmwrite={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x6}], 0x2) (async) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="3ef267dc2e4340262e2aa8bcffffff1581000000660fc7360f009983b7000065670f219dc4c245cf8cdf02000000f20f7ceef30f093e0f09", 0x38}], 0x1, 0x2, &(0x7f0000000080)=[@cstype3={0x5, 0x6}, @vmwrite={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x6}], 0x2) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$phonet(0x23, 0x2, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc002) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) socketpair(0x22, 0x5, 0x80, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010102, @broadcast, 0xffffffffffffffff, "6065d6ad4c19e955a5c9b8fbd75c56a22a667986b2a485039918f233e74265d3", 0x0, 0x0, 0x4, 0x7}, 0x3c) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xffffffff) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, "6487d33b753be886bdf232f3a8960fdb9703e361373916cf0a9edb3bbcf0ac9c", 0x0, 0x6d, 0xffffffff, 0x7fffffff}, 0x3c) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x8, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: socket$xdp(0x2c, 0x3, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$phonet(0x23, 0x2, 0x1) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc002) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) socketpair(0x22, 0x5, 0x80, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010102, @broadcast, 0xffffffffffffffff, "6065d6ad4c19e955a5c9b8fbd75c56a22a667986b2a485039918f233e74265d3", 0x0, 0x0, 0x4, 0x7}, 0x3c) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xffffffff) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, "6487d33b753be886bdf232f3a8960fdb9703e361373916cf0a9edb3bbcf0ac9c", 0x0, 0x6d, 0xffffffff, 0x7fffffff}, 0x3c) 23:13:30 executing program 1: socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x8, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$phonet(0x23, 0x2, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc002) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$phonet(0x23, 0x2, 0x1) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc002) (async) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) socketpair(0x22, 0x5, 0x80, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010102, @broadcast, 0xffffffffffffffff, "6065d6ad4c19e955a5c9b8fbd75c56a22a667986b2a485039918f233e74265d3", 0x0, 0x0, 0x4, 0x7}, 0x3c) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xffffffff) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, "6487d33b753be886bdf232f3a8960fdb9703e361373916cf0a9edb3bbcf0ac9c", 0x0, 0x6d, 0xffffffff, 0x7fffffff}, 0x3c) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x8, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf2506000000050029000000007e67003525340002000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048841) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4091}, 0x14) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, 0xffffffffffffffff}) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xfffffffb) syz_io_uring_setup(0x3c1e, &(0x7f0000000000)={0x0, 0xc959, 0x80, 0x10000001, 0x179}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000040)={0x0, 0x3fb, 0x3, 0x0, 0x2, [0x0, 0x0, 0x0], [0x100, 0x4, 0x2, 0x81], [0x3ff, 0x4, 0xfffffffb, 0x6], [0x2, 0x0, 0x0, 0x7827]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, r2, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 23:13:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf2506000000050029000000007e67003525340002000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048841) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4091}, 0x14) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, 0xffffffffffffffff}) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xfffffffb) (async) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xfffffffb) syz_io_uring_setup(0x3c1e, &(0x7f0000000000)={0x0, 0xc959, 0x80, 0x10000001, 0x179}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 23:13:30 executing program 2: prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000040)={0x0, 0x3fb, 0x3, 0x0, 0x2, [0x0, 0x0, 0x0], [0x100, 0x4, 0x2, 0x81], [0x3ff, 0x4, 0xfffffffb, 0x6], [0x2, 0x0, 0x0, 0x7827]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, r2, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, 0xffffffffffffffff}) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xfffffffb) syz_io_uring_setup(0x3c1e, &(0x7f0000000000)={0x0, 0xc959, 0x80, 0x10000001, 0x179}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800}) (async) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xfffffffb) (async) syz_io_uring_setup(0x3c1e, &(0x7f0000000000)={0x0, 0xc959, 0x80, 0x10000001, 0x179}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) (async) 23:13:30 executing program 2: prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf2506000000050029000000007e67003525340002000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048841) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4091}, 0x14) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @loopback, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x1}, 0x3c) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "5a6db77bac6caaa37bea110deedf563eeaa40597d9be1e14747b3dbba3cbd095", 0x0, 0x4, 0x0, 0x80000001}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 2: prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000040)={0x0, 0x3fb, 0x3, 0x0, 0x2, [0x0, 0x0, 0x0], [0x100, 0x4, 0x2, 0x81], [0x3ff, 0x4, 0xfffffffb, 0x6], [0x2, 0x0, 0x0, 0x7827]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, r2, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, r2, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x2, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000c00000/0x400000)=nil, 0x400000}) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @loopback, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x1}, 0x3c) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "5a6db77bac6caaa37bea110deedf563eeaa40597d9be1e14747b3dbba3cbd095", 0x0, 0x4, 0x0, 0x80000001}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x2, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM(0xf, 0x2, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:30 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) sendto$l2tp6(r0, &(0x7f0000000080)="4e30e52be22aa6214b685db81c704e85fa684d642d5933c309ea43614f11d4a48017013c18991037a724c0dcba6e22ed662318c66a4c83895e56aa420318231bf23fcd5de2549cde650d58106f94729fd380dc704886a8b40a9e37aa94017a97e29e1001e83fecf7b65451e269fadf5dc093d8b109594e5c0e809339b7f276342cade68d89284c56c413610ef5de26db8c976814a54c17fd828a914a0fb880ef03b3216ac20218f3f057f3963c69f19161f31f3b9dd111e4857ffa21f976e401006d07059582ce5b66516dc703bcf9c97597be869ef9336ff2ae96c57c130536510c03b0f3c2781b1e760324a0af6f9310179038c70facdb64ca5d965cf753e906bcce33d474f4b85d9e0d4a8bcc182adc24d346ff772c4c17feda96b36ad3c225724b9d383df534b10de74cc4d06b9d1c547b96368e65efbb4c354528e2f5594c4c0773d38206fa339a65b90c5347a59ca43fa9658c2c68bc5333a73633908eba38807da1ed4beca0edeb28082bdee67e08da0103551098601c6b30fad68a65dd117a903d804680bc1af9a4666ab4e725dd6f375a4c6bac145465398a293b9c25c63e540fd26de698dac8147137689e36d5a4e793ddf33ad8955ce83fb1f5961fd22cfe27016b474498b01950dd3d7c6f3048e7af058bde74f2ceaefcab765527482a1d9f93d856f638030f82920ec05234da032cb379489ddeceaa2a0d84aa94334be3f78f7946178b2b29b8dcf1a3f1431a206c206243eb54045bdd51784a41007257bd41f08c8929243acf895e7d42854d9ecfb6f6a0a4434595965f7a59596abe8f72cf1ec79b534f4e5d1033812bec10cbfe171fdded47f8ca87502095d681cf21d30bad77d11a0b501784b98af7079cadd7d4b055d7e44f3a39ddcf5efd8045f39a138db7bc20f9259f1cc4f188f5d8e5dcc109a4d7675dfcbc8a85a727f23a528cf72ad0b96d64d4cefdc90e1d023787dbb8877784cf855c15ebcf4b3d47d68d2780d5a98f2978c6e21e0fb529f7843557755d79c8d8d2670bc711692a56bed10ffb5b50f1d500c38d228602ed905ccf6ab6905be1878213c703811174739e9d0545a66a9f90740a141b9ee69eb46ee8b50973ffc512ac24a09dddf211f849b0a23a7cc894591b0717d61beee100861051f0b0e33a20efa04dd5c0af894536406047d21417a867e54505f28b70eaa2859e1eab8391f9e9ac45b1f93a3df91fe53ff2cf7d7bfb9284969f7bfdbaaac8cf980057c576abb0bfbbeb47defd43a5d5ebcc086262be31130ba57aecb378167b8100034904f26621079476103d9068ac67e3bb3d3f3c20694f032f224b669ca0deb860e724ed149b085f8c83479e7fd87526a4286570f78d87f4d14d531848d9e2371935c5fa5a729c6c83ecc7a487c1b69df61994c17c38d2bfaf3646998d191e7aa870a4560f8bedc8bfacc92be46ca1d89c2936a99bf34a30a2b8e6195a327af8807f00fc79b3bc09b1beb8cbb296e92051b898762bfd01dd1a4d2259e0f8b52e18f0bb620718b38d2c42360c1e25a32a46a61b3e2f72325b9612e4644862f3da906ff3e55292f2cab087bfbccd9a151864c20ebc22a2893754ea7d58198c05a236bbd180566fd50ee9bcfd2c018510898ce1ef9ae58049196989644be1748ce16dada5a754c77286fed3567108894ba0c79e9c5440c4313b16a1fd4e5b67c387c0a9853806a8b96f9905a41b876fab8c2f3101303e2b20c2ea838be44c57ac267c7c0cb4ab316a5752cecd980be3ed70efd555be20f98f605d0ce29f896482c042ce81f1bd39c35867d62981eb1911484b61dd092bde88b7d7ddae00b3bf25284f21f8bb05b1df197ce0ffbda682b34fa20fa978c25bd2cbbedbb63c01090c479a19906add36c5124745a3e12bf0f4117e0ac6bb26943a399019d393db88dc3485282e9e52f775b46d0b8583014ea79a44300067ef66ad91b04e3b2ea483a389182ad4bbe1c33f662965e3c609bcc7826bcb14ec886e46f1fccbbd843c5275c16cc701df3a325609c9f2ce9a8c42bc5ef684550d8d99cd65126fbdf9f7a7a7f6235998850086752b75539a1c339a5a92043ca417bc9d47346c54af6cea206f0352a5dcb2eff91767a1e7c630b93723b588de3a3dc8b6d6e5430547e4148ce3f0b9f3c8bbe0288e05719b9c4a4bf1483efd810aa15b0d3df27ab33cc521cad2712f704ff1a5333d143a1e7b2ed829e6ca51b591f0498da5b067cff8479689bacc85670a03ea5fc856b8867f3efdb7a702602fda0da3aff674498ede30fa496a9c812360d547145dfae65945b8007d60795dbbd1ca919c28186d5324e0b57c472819442c791bac6f5f506819edc48ea4f441b1a0ffb8e2a159b44cbfc4bfbeeae072262e1b043bfb723333d7dba9e07dbc68870531516d8eec1bae5717fd801c4ccee96aa89f80647eedd12b8b930cc00cb93215ba2789beca16f3acb3a9393d904ed5bcfb8692ac31f16a81b1f1fba9fce44140c233391380f00533a8a5451991632e868e053b3cd4b89a774f6d602dab8f5547097f1264a5a66ee9f7b20e7808e882b91149147dd7f81ecec435cd5701a331a08d1dc5f62798c602c786854f62465d6a3c21b4e5f87e3568042b84faa9a1da262bfd79bf26629a2509a28077e9d0e121984666085d4a7210ca4a0b92b6fe5e2d8cb3d0cb34d79459f87825a6b09a5677d77b70b6a4f86c11cb6368cce937c2bdefd5ee772e3b06a51af7d0d53f0dd21b7e367ef5e89f572deab4b4cf69ea39e155b03f748c8c06c7b363851502e497255728c722fbf7a1315966a51a617cce515a0e4d1114cc28ffd00f3796d8368dedf77e67f0e730f9bab57070bba85c62c24469cd83a9fdaeeebe0466bd16c3e5217af48a42dd73bfa0bfeb62a41015b93b1328d2a14e4376936ef71557500427db488ff53dd9f8408b1d920ca17d448c9a76af9149ea2ba88ab9e4a5d0a9a780e48f87342d970f5ff7bcffaa3ad841809a33f2f79929fec6197d910f74b49d6a9607538c7f31c1fee570faebbf756bdb837ca584598210873832951c7cc1264e50d2bff1e5065353c332225eeff7662c46c06520211d73f1b4a7541d35515142c6a74e9d4430b4bb44a3d29ed3366ee8e0bf2d2cf23e777d8827331e51518c4a0f29690e3a5ae5d2bfc730c4fe73beb661b7f450df8f4e1c81e7d6adcd34a6a9486d067ead627de616c45eb32cd789d78da6d91fc1a433efbd79745b502ece8a7ec77f6540b7ddd489989f8123259ec91672e882775e8bcbd79d3f08ae72fa7f61db948c518e1f6f01277bb72110831ae203d24dbf53cda5f43457cf9def53018721085bc23a54ac5a7bb58ea1b4ebe74217c99ab51e9c42089c01183b9e07c80fa06e2ecc51c4751687ddbeba030ae5731619b731259fabf5977f73f3a7f824edcc91225b52a0df4b6dffec1e1ff3c6dc6e98b6197dcd551a49b771c13555d06968754a199f53dcf5df2b4fc7d72c786dc3210ec3a6cadac4e7234988a41890802726358a3cb18748d332c5d550afbad6c2f9354312ef3fcb37ecd77599ca358edc28aaf5d8fc5fe7e450a39605f763981d5b7eace86922010d9434f33aaaa555c325ce0860fc61da712d43c43a67b0df2f07f4f1ccbea487ed1db48308bdc4213f390a7e6effbd243d435a6a2b414bd97028a6a01eb71f3f115e118f579e7111606ac335f04d875b64a51278f9521545f1ee8c04bfe9436b5ee272a5659a0c6237a20b7728dd3d02f4fea628515743db3773107d10c857e40d9c340ebe2be52e030b57912a662bc887a320f13834929b9c5eda0d86fb2b993012cf95c69fd75663a3c54d28ddc4121af3f24a03b6ef035c5f0e7417666c5986eea0036441c27fc050a03f85a5b04bbfd3e3bff3809c0c25ab80b89bc3e9b9deefaf87fb9e008c96b4de3c9665b371ed95dccedbc610f6f4fd49c869c9b0073c0285f4e847bd0be7bba0ae61a3adc5d4ac686b62228a6582f0170d7fde84880e907e95518576d9493d414fd79e7d6cb8b11c2842be1e7b1690189acc8b81a4fbea108e10d589b9e0eed6081e04cde39ec58ae9192f2b18ea802b6869e00b00cfc0f6414684d0ddc5562e43e29473db0ae00698432fb07e4bba196a03f3b5db41fcad1822d1b81e70c4c49e9c7fca7f5fc4be4492d80de80150cbab5ecf5b601f574110443abcb4a4f72015613355a74ebeb48481aee2ef1ffe58e3ea6be56113322f9051cbc590728b2c60388c7cf43744a9a40d4ab4d9997881c6df309a47ca33c78ab7186d689e4806d3597b0f57b8ca0ecf7bc27a6e244ccd5b09ec80fd295e571123ab2f796b3f16e91b45be90338bc95c2160b4812cf57f46793b6895e81e340c84f2a2b18cb87a54be072658bbd466ce440b5c39d27f81543f1669b4588f26b6f2774dfaa4c185f1962c7366f59e811585746da6155e9bbe714006db78d2b8c493be84ef3db9888b65caba7d2e138530a9f76400e4ba47fb01861c60f9bf640e550751f0b85638876ac018f21e9b67d9596eab29471665e255bcbedbde715416e203ea6e52c586bcf9e52ac00532cf3b625a80ada230fce0fea49eb48ac063191e8d1119912b7681c1276dd95fb95b80e894a7fd0382083c28907089916b5367cff278b7e4f109ab2c0af922ebeb24ffbf4ab309c778558dcf84143f698860d56f5319de11ea9af639cefe9af11ba85ac713af8bd879b32d4f889f447fd48f2e9de4df75d1cd3404ec29872768ccdd288d20ffc85c0c711618a8c004486b5c616d4598f2eeb1bc17b9f388564a345e027c036e41f8ee8aeeba4734af687a93695d437f5462b50cfd611f05db87e03e1ae71d2407df54c60869ea53c80eaca8d6b620d0ad3e260a1e9a7ff2d41216e7a6cc73836780d1f00413eb6514dd2e2a77aee2288b171d1e83e7239f5ca0685b6d450e1bd4ef7d2def9c04e6fa80fc7416bf33374604d174de757180a9949059a748cf0c5cd3aa9679757602afd60dd27e51a1b217c1c720a4bbf20fd04e4fb0e540dddb7a08b09c677b886b19792cfc683a7bfe5701e78db7c1252c62fd1d0ce183514238dc6acd84621e2f12cd20acf9268ca4211605daebbacc7dd68928789c7852bd79ed539314358670515a2f579440fa899d1162e0ca9127ff79cf563ad724e7b4bd3fbc0dc6043af1b1b5a14682adab7cd9800ed8a63378d7683b31d7b4ca12c4ab4ae1fc8639c9b5eef9bcedc20c89ceb0c05aa8850f90420f9c747bede21259a32dbf7a4a3503334b6439ccd91e1a6e272806c2873186515ab25f44b0eb1c893de9b3db90c3eefe172f582dee2cc9fe588e770993ba5682140d052c1d0d23331c004ccc766591d27968f89eaeae99bfc4b20b32003a8e69204b3de62bedfccafa2d26a9766079ceed42a26593e92a4c2e3f8e6c954da648704c48675ec3ba29a187fec88c5c5fd9b62361372a6f946bd46453eb8facd0f88fcc29a0958dcd8aa7a31e41037b2b550e41dc8f488ff109a26af6fec01e2fa95c3d7f2f16def304501567f0af4fa56669022f2baa2a3dc6c6a7d9b3469402d5e2cd5efc0d965d375553333c282ed2bd563cca607599aa8795797ee6e8afc0f11ebad6e47ae20c522bbc3171c12dd0958a7af8d5e8327a054855ead6343dbd5a7d80c33b49dd8c5b6616b3f47cce6636bad446c8a1f36a70ebf2f6b03dafc9c985f86d73150c51d0ddad5480727d0e1f90c1b6dce33dded171420b6b66f55766e48f4f9f6b2232014096a31046eb9fa2464f75b5940e1587e2174caa909900d6", 0x1000, 0x40800, &(0x7f0000001080)={0xa, 0x0, 0x36, @mcast1, 0x5, 0x1}, 0x20) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000010c0)={@any, 0x7fff, 0xba, 0x9, 0xd313, 0x1000, "8948228839e86992dd4b0538a31eb1d47b0864870e11affb6d75a330755e1565c315a3037a58239a3a7e4d5a2d1ff7f4aca9477fb567d8c7562374e80c931b6f20124c4e116b24756ba9638e9dfb02e82d4a64e0b5d0fad0e738440462b0da6e2e6f101fc646e9f45965dc75ee5928f5a6ce72ebacfb92b3b716bacdef7ce907"}) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000c00000/0x400000)=nil, 0x400000}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000c00000/0x400000)=nil, 0x400000}) (async) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x2, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @loopback, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x1}, 0x3c) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "5a6db77bac6caaa37bea110deedf563eeaa40597d9be1e14747b3dbba3cbd095", 0x0, 0x4, 0x0, 0x80000001}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "5a6db77bac6caaa37bea110deedf563eeaa40597d9be1e14747b3dbba3cbd095", 0x0, 0x4, 0x0, 0x80000001}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) sendto$l2tp6(r0, &(0x7f0000000080)="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", 0x1000, 0x40800, &(0x7f0000001080)={0xa, 0x0, 0x36, @mcast1, 0x5, 0x1}, 0x20) (async) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000010c0)={@any, 0x7fff, 0xba, 0x9, 0xd313, 0x1000, "8948228839e86992dd4b0538a31eb1d47b0864870e11affb6d75a330755e1565c315a3037a58239a3a7e4d5a2d1ff7f4aca9477fb567d8c7562374e80c931b6f20124c4e116b24756ba9638e9dfb02e82d4a64e0b5d0fad0e738440462b0da6e2e6f101fc646e9f45965dc75ee5928f5a6ce72ebacfb92b3b716bacdef7ce907"}) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x4, 0x1f}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000c00000/0x400000)=nil, 0x400000}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000c00000/0x400000)=nil, 0x400000}) (async) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x7, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) 23:13:30 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) sendto$l2tp6(r0, &(0x7f0000000080)="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", 0x1000, 0x40800, &(0x7f0000001080)={0xa, 0x0, 0x36, @mcast1, 0x5, 0x1}, 0x20) (async, rerun: 32) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000010c0)={@any, 0x7fff, 0xba, 0x9, 0xd313, 0x1000, "8948228839e86992dd4b0538a31eb1d47b0864870e11affb6d75a330755e1565c315a3037a58239a3a7e4d5a2d1ff7f4aca9477fb567d8c7562374e80c931b6f20124c4e116b24756ba9638e9dfb02e82d4a64e0b5d0fad0e738440462b0da6e2e6f101fc646e9f45965dc75ee5928f5a6ce72ebacfb92b3b716bacdef7ce907"}) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x4, 0x1f}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x7, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x7, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0xffffffffffffffff, "0764836fd23f7f4feb04a1e60e13152febb8566e0dbc0a78186d4335042b8416", 0x706}, 0x3c) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x4, @remote, 0xe650583, 0x2}, 0x20) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="50a293f4d7656bc06ff9aea65099388a1885cbf72bd3bfc29ef768ef97689ac42439f06315cc468bda92b4fabb94a10464861f35719822b37e12cda18fc57fd7f8124e21d268", 0x46, 0xfffffffffffffffd) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0xffffffffffffff9a) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x69) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5a800000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3368}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x4008040) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x810, r0, 0x8000000) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x4, 0x1f}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x7, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) 23:13:30 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x69) ioctl$TCSETAF(r0, 0x5408, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5a800000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3368}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x4008040) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x810, r0, 0x8000000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x810, r0, 0x8000000) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0xffffffffffffffff, "0764836fd23f7f4feb04a1e60e13152febb8566e0dbc0a78186d4335042b8416", 0x706}, 0x3c) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x4, @remote, 0xe650583, 0x2}, 0x20) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="50a293f4d7656bc06ff9aea65099388a1885cbf72bd3bfc29ef768ef97689ac42439f06315cc468bda92b4fabb94a10464861f35719822b37e12cda18fc57fd7f8124e21d268", 0x46, 0xfffffffffffffffd) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0xffffffffffffff9a) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0xffffffffffffffff, "0764836fd23f7f4feb04a1e60e13152febb8566e0dbc0a78186d4335042b8416", 0x706}, 0x3c) (async) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x4, @remote, 0xe650583, 0x2}, 0x20) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="50a293f4d7656bc06ff9aea65099388a1885cbf72bd3bfc29ef768ef97689ac42439f06315cc468bda92b4fabb94a10464861f35719822b37e12cda18fc57fd7f8124e21d268", 0x46, 0xfffffffffffffffd) (async) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0xffffffffffffff9a) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0xde5}, 0x3c) prctl$PR_SET_MM(0x25, 0x3, &(0x7f0000ffb000/0x3000)=nil) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x11010, 0xffffffffffffffff, 0x20cb7000) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x7}) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 23:13:30 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x69) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5a800000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3368}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x4008040) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x810, r0, 0x8000000) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0xde5}, 0x3c) prctl$PR_SET_MM(0x25, 0x3, &(0x7f0000ffb000/0x3000)=nil) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x11010, 0xffffffffffffffff, 0x20cb7000) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x7}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0xde5}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x3, &(0x7f0000ffb000/0x3000)=nil) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x11010, 0xffffffffffffffff, 0x20cb7000) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x7}) (async) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0xffffffffffffffff, "0764836fd23f7f4feb04a1e60e13152febb8566e0dbc0a78186d4335042b8416", 0x706}, 0x3c) (async) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x4, @remote, 0xe650583, 0x2}, 0x20) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 32) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="50a293f4d7656bc06ff9aea65099388a1885cbf72bd3bfc29ef768ef97689ac42439f06315cc468bda92b4fabb94a10464861f35719822b37e12cda18fc57fd7f8124e21d268", 0x46, 0xfffffffffffffffd) (async, rerun: 32) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0xffffffffffffff9a) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x9, 0x381380) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x2800) openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0xde5}, 0x3c) prctl$PR_SET_MM(0x25, 0x3, &(0x7f0000ffb000/0x3000)=nil) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x11010, 0xffffffffffffffff, 0x20cb7000) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x7}) 23:13:30 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x1, 0x1, 0x0, 0x21f8}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x9, 0x381380) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x2800) openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 23:13:30 executing program 0: socketpair(0x29, 0x0, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x80) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}) 23:13:30 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x1, 0x1, 0x0, 0x21f8}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x9, 0x381380) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x2800) (async) openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 23:13:30 executing program 0: socketpair(0x29, 0x0, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x80) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) (async, rerun: 64) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (rerun: 64) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}) 23:13:30 executing program 1: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0xe0102, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000) syz_open_dev$usbfs(&(0x7f0000000000), 0x40, 0x0) 23:13:30 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x1, 0x1, 0x0, 0x21f8}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x1, 0x1, 0x0, 0x21f8}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:30 executing program 0: socketpair(0x29, 0x0, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x80) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) (async, rerun: 32) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}) 23:13:30 executing program 1: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000ff9000/0x4000)=nil}) (async) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0xe0102, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000) syz_open_dev$usbfs(&(0x7f0000000000), 0x40, 0x0) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/108, 0x6c, 0x0, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000011c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001300)={&(0x7f00000012c0)=[r1], 0x1, 0x80000}) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x8}) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000001c0)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={@any, 0x1218, 0x8000, 0x7fff, 0x5, 0xf5c9, "53b4db338d28850122121271372a3f548e0ff0a0de4fc65d44382c2b5d52e200000000000000002b64fc76eea9e13430e3887150239b710031616df4307ce5b43fc652a6eac7fe281def121a9e38d0ceeec13c4d1b12e7559172b23717e15c194ecf83e01ce493e27c22a8d7646f90574b116a785e00"}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x1000)=nil}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0xdb160000) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000180)={0x3, 0x1, 0xe, 0x9, 0x14c, &(0x7f0000000240)}) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff}) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ff8000/0x3000)=nil) mmap(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x2, 0x4000010, 0xffffffffffffffff, 0x7d7ea000) userfaultfd(0x80800) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_TIMEOUT(r0, 0x702, 0xfffffff7) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x80, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x8001) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/108, 0x6c, 0x0, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000011c0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001300)={&(0x7f00000012c0)=[r1], 0x1, 0x80000}) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x8}) 23:13:30 executing program 1: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000ff9000/0x4000)=nil}) (async) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0xe0102, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x40, 0x0) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ff8000/0x3000)=nil) mmap(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x2, 0x4000010, 0xffffffffffffffff, 0x7d7ea000) (async) mmap(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x2, 0x4000010, 0xffffffffffffffff, 0x7d7ea000) userfaultfd(0x80800) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$I2C_TIMEOUT(r0, 0x702, 0xfffffff7) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x80, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x8001) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000001c0)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={@any, 0x1218, 0x8000, 0x7fff, 0x5, 0xf5c9, "53b4db338d28850122121271372a3f548e0ff0a0de4fc65d44382c2b5d52e200000000000000002b64fc76eea9e13430e3887150239b710031616df4307ce5b43fc652a6eac7fe281def121a9e38d0ceeec13c4d1b12e7559172b23717e15c194ecf83e01ce493e27c22a8d7646f90574b116a785e00"}) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={@any, 0x1218, 0x8000, 0x7fff, 0x5, 0xf5c9, "53b4db338d28850122121271372a3f548e0ff0a0de4fc65d44382c2b5d52e200000000000000002b64fc76eea9e13430e3887150239b710031616df4307ce5b43fc652a6eac7fe281def121a9e38d0ceeec13c4d1b12e7559172b23717e15c194ecf83e01ce493e27c22a8d7646f90574b116a785e00"}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x1000)=nil}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0xdb160000) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000180)={0x3, 0x1, 0xe, 0x9, 0x14c, &(0x7f0000000240)}) (async) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000180)={0x3, 0x1, 0xe, 0x9, 0x14c, &(0x7f0000000240)}) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff}) 23:13:30 executing program 1: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00007fd000/0x800000)=nil}) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/108, 0x6c, 0x0, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000011c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001300)={&(0x7f00000012c0)=[r1], 0x1, 0x80000}) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x8}) 23:13:30 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ff8000/0x3000)=nil) mmap(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x2, 0x4000010, 0xffffffffffffffff, 0x7d7ea000) userfaultfd(0x80800) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$I2C_TIMEOUT(r0, 0x702, 0xfffffff7) (async, rerun: 32) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x80, 0x0) (rerun: 32) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)) (async) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x8001) 23:13:30 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000001c0)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={@any, 0x1218, 0x8000, 0x7fff, 0x5, 0xf5c9, "53b4db338d28850122121271372a3f548e0ff0a0de4fc65d44382c2b5d52e200000000000000002b64fc76eea9e13430e3887150239b710031616df4307ce5b43fc652a6eac7fe281def121a9e38d0ceeec13c4d1b12e7559172b23717e15c194ecf83e01ce493e27c22a8d7646f90574b116a785e00"}) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x1000)=nil}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0xdb160000) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000180)={0x3, 0x1, 0xe, 0x9, 0x14c, &(0x7f0000000240)}) (async) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff}) 23:13:30 executing program 1: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) (async, rerun: 32) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00007fd000/0x800000)=nil}) (rerun: 32) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x3}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x1, 0x3, 0x805, 0x40, 0xa, "c42700bdc400"}) ioctl$KDADDIO(r0, 0x4b34, 0xfffffeff) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x3, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast2}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000002c0)=[0x9, 0x5, 0xd0], &(0x7f0000000380)=[0x1, 0x8, 0x101, 0x9, 0xf2], &(0x7f00000003c0)=[0x5, 0x0]}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf251100000008003b00358a00000500330001000000080032000008000005d0910100000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) syz_io_uring_setup(0x1d4f, &(0x7f0000000240)={0x0, 0x1675e, 0x0, 0x2, 0x312, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000300)) 23:13:30 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/231, 0xe7, 0x0, &(0x7f0000000140)=""/24, 0x18}, &(0x7f00000001c0)=0x40) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000200), 0x420501, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 0: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x2, 0x5}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) (async) r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00007fd000/0x800000)=nil}) 23:13:30 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x3}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x1, 0x3, 0x805, 0x40, 0xa, "c42700bdc400"}) ioctl$KDADDIO(r0, 0x4b34, 0xfffffeff) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x3, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast2}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000002c0)=[0x9, 0x5, 0xd0], &(0x7f0000000380)=[0x1, 0x8, 0x101, 0x9, 0xf2], &(0x7f00000003c0)=[0x5, 0x0]}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf251100000008003b00358a00000500330001000000080032000008000005d0910100000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) syz_io_uring_setup(0x1d4f, &(0x7f0000000240)={0x0, 0x1675e, 0x0, 0x2, 0x312, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000300)) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x3}, 0x3c) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x1, 0x3, 0x805, 0x40, 0xa, "c42700bdc400"}) (async) ioctl$KDADDIO(r0, 0x4b34, 0xfffffeff) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x3, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast2}, 0x10) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000002c0)=[0x9, 0x5, 0xd0], &(0x7f0000000380)=[0x1, 0x8, 0x101, 0x9, 0xf2], &(0x7f00000003c0)=[0x5, 0x0]}) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf251100000008003b00358a00000500330001000000080032000008000005d0910100000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) syz_io_uring_setup(0x1d4f, &(0x7f0000000240)={0x0, 0x1675e, 0x0, 0x2, 0x312, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000300)) (async) 23:13:30 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/231, 0xe7, 0x0, &(0x7f0000000140)=""/24, 0x18}, &(0x7f00000001c0)=0x40) (async) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000200), 0x420501, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 0: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x2, 0x5}) (async) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x2, 0x5}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:30 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x977}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 23:13:30 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/231, 0xe7, 0x0, &(0x7f0000000140)=""/24, 0x18}, &(0x7f00000001c0)=0x40) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000200), 0x420501, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 0: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) (async) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x2, 0x5}) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x3}, 0x3c) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 64) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x1, 0x3, 0x805, 0x40, 0xa, "c42700bdc400"}) (rerun: 64) ioctl$KDADDIO(r0, 0x4b34, 0xfffffeff) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x3, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast2}, 0x10) (async, rerun: 64) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000002c0)=[0x9, 0x5, 0xd0], &(0x7f0000000380)=[0x1, 0x8, 0x101, 0x9, 0xf2], &(0x7f00000003c0)=[0x5, 0x0]}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf251100000008003b00358a00000500330001000000080032000008000005d0910100000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) syz_io_uring_setup(0x1d4f, &(0x7f0000000240)={0x0, 0x1675e, 0x0, 0x2, 0x312, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000300)) 23:13:31 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x977}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 23:13:31 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4080) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x5) prctl$PR_SET_MM(0xf, 0x9, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x977}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4080) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x5) (async) prctl$PR_SET_MM(0xf, 0x9, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r2, 0x30b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r2, 0x200, 0x70bd27, 0x8, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000890) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x704, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc312}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040801) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x101800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r6, 0x800, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x40}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r7, 0x5408, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004084}, 0x4090) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KIOCSOUND(r8, 0x4b2f, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x700, 0x80, 0x7e1, 0x8, {{0x1b, 0x4, 0x0, 0x6, 0x6c, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@noop, @rr={0x7, 0xf, 0x89, [@loopback, @empty, @empty]}, @generic={0x89, 0xb, "cfb4cabfddbc6acf94"}, @rr={0x7, 0x7, 0x84, [@local]}, @timestamp_addr={0x44, 0x1c, 0xa1, 0x1, 0xf, [{@multicast1, 0x9}, {@multicast2, 0x1f44d3b2}, {@broadcast, 0x7}]}, @end, @ssrr={0x89, 0x17, 0xc1, [@loopback, @multicast2, @rand_addr=0x64010100, @remote, @empty]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa90}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff3a9d}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x32}, 0x3, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x9}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$ttyprintk(0xffffff9c, &(0x7f0000000180), 0x109000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) syz_io_uring_setup(0xd6d, &(0x7f0000000080)={0x0, 0xee8c, 0x20, 0x1, 0x207, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4080) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x5) prctl$PR_SET_MM(0xf, 0x9, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r2, 0x30b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r2, 0x200, 0x70bd27, 0x8, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000890) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x704, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc312}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040801) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x101800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r6, 0x800, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x40}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r7 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r7, 0x5408, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004084}, 0x4090) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KIOCSOUND(r8, 0x4b2f, 0x4) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x700, 0x80, 0x7e1, 0x8, {{0x1b, 0x4, 0x0, 0x6, 0x6c, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@noop, @rr={0x7, 0xf, 0x89, [@loopback, @empty, @empty]}, @generic={0x89, 0xb, "cfb4cabfddbc6acf94"}, @rr={0x7, 0x7, 0x84, [@local]}, @timestamp_addr={0x44, 0x1c, 0xa1, 0x1, 0xf, [{@multicast1, 0x9}, {@multicast2, 0x1f44d3b2}, {@broadcast, 0x7}]}, @end, @ssrr={0x89, 0x17, 0xc1, [@loopback, @multicast2, @rand_addr=0x64010100, @remote, @empty]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa90}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff3a9d}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async, rerun: 64) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}) (rerun: 64) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x80, 0x100) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x2000)=nil) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x140010, r0, 0x100000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x32}, 0x3, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x9}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$ttyprintk(0xffffff9c, &(0x7f0000000180), 0x109000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) syz_io_uring_setup(0xd6d, &(0x7f0000000080)={0x0, 0xee8c, 0x20, 0x1, 0x207, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x80, 0x100) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) (async) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x2000)=nil) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x140010, r0, 0x100000000) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) shmget$private(0x0, 0x4000, 0x54000106, &(0x7f0000ffc000/0x4000)=nil) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x32}, 0x3, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x9}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$ttyprintk(0xffffff9c, &(0x7f0000000180), 0x109000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) (async) syz_io_uring_setup(0xd6d, &(0x7f0000000080)={0x0, 0xee8c, 0x20, 0x1, 0x207, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) 23:13:31 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r2, 0x30b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async, rerun: 64) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) ioctl$TCSETAF(r4, 0x5408, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r2, 0x200, 0x70bd27, 0x8, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000890) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x704, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc312}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040801) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x101800) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r6, 0x800, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x40}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r7 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r7, 0x5408, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004084}, 0x4090) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KIOCSOUND(r8, 0x4b2f, 0x4) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x700, 0x80, 0x7e1, 0x8, {{0x1b, 0x4, 0x0, 0x6, 0x6c, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@noop, @rr={0x7, 0xf, 0x89, [@loopback, @empty, @empty]}, @generic={0x89, 0xb, "cfb4cabfddbc6acf94"}, @rr={0x7, 0x7, 0x84, [@local]}, @timestamp_addr={0x44, 0x1c, 0xa1, 0x1, 0xf, [{@multicast1, 0x9}, {@multicast2, 0x1f44d3b2}, {@broadcast, 0x7}]}, @end, @ssrr={0x89, 0x17, 0xc1, [@loopback, @multicast2, @rand_addr=0x64010100, @remote, @empty]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa90}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff3a9d}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x80, 0x100) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x80, 0x100) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff8000/0x2000)=nil) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x140010, r0, 0x100000000) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x140010, r0, 0x100000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) socket$igmp(0x2, 0x3, 0x2) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) shmget$private(0x0, 0x4000, 0x54000106, &(0x7f0000ffc000/0x4000)=nil) 23:13:31 executing program 2: ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}}) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000340), 0x4) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/217, 0xd9, 0x1, &(0x7f0000000280)=""/44, 0x2c}, &(0x7f0000000300)=0x40) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x30}, @loopback, 0x1, "99debfcfca8aeeddd26f9a5a755ae16a6c04190caec6a420977b5cc22629587c", 0xfffffffd, 0x8, 0x40, 0x6e}, 0x3c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0], 0x2}) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000080)="db319b959b17769364279575d42d0d72b4672d55bda91e6fdc80844903bf36bce53dfd0de310d39ddaaeea80e8d401d701e0cedb355bef37b6ba0033269c4a158c52057552cc3decb3bd626fcc9f2b7a6d918c31490a9a4c962d27", 0x5b, 0x2400c094, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa4, 0x2}, 0x20) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) socket$igmp(0x2, 0x3, 0x2) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) shmget$private(0x0, 0x4000, 0x54000106, &(0x7f0000ffc000/0x4000)=nil) 23:13:31 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@private2, @empty}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 2: ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}}) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}}) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000340), 0x4) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/217, 0xd9, 0x1, &(0x7f0000000280)=""/44, 0x2c}, &(0x7f0000000300)=0x40) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x30}, @loopback, 0x1, "99debfcfca8aeeddd26f9a5a755ae16a6c04190caec6a420977b5cc22629587c", 0xfffffffd, 0x8, 0x40, 0x6e}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x30}, @loopback, 0x1, "99debfcfca8aeeddd26f9a5a755ae16a6c04190caec6a420977b5cc22629587c", 0xfffffffd, 0x8, 0x40, 0x6e}, 0x3c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0], 0x2}) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000080)="db319b959b17769364279575d42d0d72b4672d55bda91e6fdc80844903bf36bce53dfd0de310d39ddaaeea80e8d401d701e0cedb355bef37b6ba0033269c4a158c52057552cc3decb3bd626fcc9f2b7a6d918c31490a9a4c962d27", 0x5b, 0x2400c094, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa4, 0x2}, 0x20) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x500a00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x67254fef}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x11) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x94b}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000040}, 0x41) 23:13:31 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@private2, @empty}) (async, rerun: 32) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (rerun: 32) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000000c0)={@broadcast, @broadcast, 0xffffffffffffffff, "e5ea6c1c5feae5c1701a3a85ecb91f083052455839a1819974d05fc8e4bed4e2", 0x9, 0x7, 0x81, 0x1}, 0x3c) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) mmap$usbmon(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x2010, r1, 0x6ac84c6a) 23:13:31 executing program 2: ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}}) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000340), 0x4) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/217, 0xd9, 0x1, &(0x7f0000000280)=""/44, 0x2c}, &(0x7f0000000300)=0x40) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x30}, @loopback, 0x1, "99debfcfca8aeeddd26f9a5a755ae16a6c04190caec6a420977b5cc22629587c", 0xfffffffd, 0x8, 0x40, 0x6e}, 0x3c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0], 0x2}) (async) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000080)="db319b959b17769364279575d42d0d72b4672d55bda91e6fdc80844903bf36bce53dfd0de310d39ddaaeea80e8d401d701e0cedb355bef37b6ba0033269c4a158c52057552cc3decb3bd626fcc9f2b7a6d918c31490a9a4c962d27", 0x5b, 0x2400c094, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa4, 0x2}, 0x20) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x500a00) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x500a00) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x67254fef}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x11) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x94b}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000040}, 0x41) 23:13:31 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@private2, @empty}) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@private2, @empty}) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000000c0)={@broadcast, @broadcast, 0xffffffffffffffff, "e5ea6c1c5feae5c1701a3a85ecb91f083052455839a1819974d05fc8e4bed4e2", 0x9, 0x7, 0x81, 0x1}, 0x3c) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) mmap$usbmon(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x2010, r1, 0x6ac84c6a) 23:13:31 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @rand_addr=0x64010100, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x500a00) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x67254fef}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x11) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x94b}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000040}, 0x41) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x40010, r0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x8000000) 23:13:31 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @rand_addr=0x64010100, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) (rerun: 32) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000000c0)={@broadcast, @broadcast, 0xffffffffffffffff, "e5ea6c1c5feae5c1701a3a85ecb91f083052455839a1819974d05fc8e4bed4e2", 0x9, 0x7, 0x81, 0x1}, 0x3c) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) mmap$usbmon(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x2010, r1, 0x6ac84c6a) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x40010, r0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x8000000) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x101901) 23:13:31 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 64) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @rand_addr=0x64010100, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async, rerun: 64) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x9, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$I2C_RETRIES(r0, 0x701, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @loopback}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x4, 0x7, {{0x1e, 0x4, 0x2, 0x2, 0x78, 0x68, 0x0, 0xf0, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x1d, 0x3, [{0x6, 0x12, "a85d0f8332041b5e7c087f1034b6843a"}, {0x2, 0x5, "b3fe87"}]}, @timestamp_prespec={0x44, 0x44, 0x4b, 0x3, 0x3, [{@multicast2, 0x6}, {@private=0xa010101, 0x3}, {@broadcast, 0x462}, {@multicast1, 0x1}, {@multicast1, 0x8}, {@remote, 0x8}, {@loopback, 0x5}, {@remote, 0x7fffffff}]}]}}}}}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x40010, r0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x8000000) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) (async) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x40010, r0, 0x4) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x8000000) (async) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x101901) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60effff0000b8566e0dbc0b7818034735612b8416", 0x0, 0x0, 0x6}, 0x3c) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x4, 0x9, 0x7, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa0de}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="73790600"/18, @ANYRES32=0x0, @ANYBLOB="07007800000000040000005d43be004c00670000fd299078000000007f000001442481130a0101010000342fac1414bb00000007ffffffff00010000ac1414aa000000054414b183e000000200000004ac14143600000005"]}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000003c0)={0x0, 0x1, 0x46, 0x81, @vifc_lcl_ifindex=r1, @multicast2}, 0x10) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x101}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x9, &(0x7f0000ffb000/0x1000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$I2C_RETRIES(r0, 0x701, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @loopback}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x4, 0x7, {{0x1e, 0x4, 0x2, 0x2, 0x78, 0x68, 0x0, 0xf0, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x1d, 0x3, [{0x6, 0x12, "a85d0f8332041b5e7c087f1034b6843a"}, {0x2, 0x5, "b3fe87"}]}, @timestamp_prespec={0x44, 0x44, 0x4b, 0x3, 0x3, [{@multicast2, 0x6}, {@private=0xa010101, 0x3}, {@broadcast, 0x462}, {@multicast1, 0x1}, {@multicast1, 0x8}, {@remote, 0x8}, {@loopback, 0x5}, {@remote, 0x7fffffff}]}]}}}}}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x9, &(0x7f0000ffb000/0x1000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$I2C_RETRIES(r0, 0x701, 0x2) (async) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @loopback}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x4, 0x7, {{0x1e, 0x4, 0x2, 0x2, 0x78, 0x68, 0x0, 0xf0, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x1d, 0x3, [{0x6, 0x12, "a85d0f8332041b5e7c087f1034b6843a"}, {0x2, 0x5, "b3fe87"}]}, @timestamp_prespec={0x44, 0x44, 0x4b, 0x3, 0x3, [{@multicast2, 0x6}, {@private=0xa010101, 0x3}, {@broadcast, 0x462}, {@multicast1, 0x1}, {@multicast1, 0x8}, {@remote, 0x8}, {@loopback, 0x5}, {@remote, 0x7fffffff}]}]}}}}}) (async) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) (async) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff9000/0x4000)=nil) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x101901) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff9000/0x4000)=nil) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x9, &(0x7f0000ffb000/0x1000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$I2C_RETRIES(r0, 0x701, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @loopback}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (rerun: 32) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x4, 0x7, {{0x1e, 0x4, 0x2, 0x2, 0x78, 0x68, 0x0, 0xf0, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x1d, 0x3, [{0x6, 0x12, "a85d0f8332041b5e7c087f1034b6843a"}, {0x2, 0x5, "b3fe87"}]}, @timestamp_prespec={0x44, 0x44, 0x4b, 0x3, 0x3, [{@multicast2, 0x6}, {@private=0xa010101, 0x3}, {@broadcast, 0x462}, {@multicast1, 0x1}, {@multicast1, 0x8}, {@remote, 0x8}, {@loopback, 0x5}, {@remote, 0x7fffffff}]}]}}}}}) (async) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60effff0000b8566e0dbc0b7818034735612b8416", 0x0, 0x0, 0x6}, 0x3c) (async) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x4, 0x9, 0x7, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa0de}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000001) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="73790600"/18, @ANYRES32=0x0, @ANYBLOB="07007800000000040000005d43be004c00670000fd299078000000007f000001442481130a0101010000342fac1414bb00000007ffffffff00010000ac1414aa000000054414b183e000000200000004ac14143600000005"]}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000003c0)={0x0, 0x1, 0x46, 0x81, @vifc_lcl_ifindex=r1, @multicast2}, 0x10) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x101}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x2aa040) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0x1000) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60effff0000b8566e0dbc0b7818034735612b8416", 0x0, 0x0, 0x6}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60effff0000b8566e0dbc0b7818034735612b8416", 0x0, 0x0, 0x6}, 0x3c) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x4, 0x9, 0x7, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa0de}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="73790600"/18, @ANYRES32=0x0, @ANYBLOB="07007800000000040000005d43be004c00670000fd299078000000007f000001442481130a0101010000342fac1414bb00000007ffffffff00010000ac1414aa000000054414b183e000000200000004ac14143600000005"]}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000003c0)={0x0, 0x1, 0x46, 0x81, @vifc_lcl_ifindex=r1, @multicast2}, 0x10) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x101}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) 23:13:31 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000040)="a62fae563a15ff940b7d16f5e8bdb484239b6abcbe308fadb7e940fd920432060c983faa02a7104632e621de5ccccae31d7c5857e68dea4e933b57992b", 0x3d}, 0x64) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000100), 0xc000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fff) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x36) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff9000/0x4000)=nil) (async) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x2aa040) (async) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0x1000) 23:13:31 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0186415, &(0x7f0000000080)={&(0x7f0000fec000/0xf000)=nil, 0x20af, 0x4, 0x31}) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8010, r0, 0xd1) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000340)={0x10002, 0x0, &(0x7f0000fec000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x18) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}], &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0], 0x2, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000300)={0x82, r4, r5, 0xbbbbbbbb}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000380), 0x22a400, 0xe1) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4018641b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff2000/0xb000)=nil}) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil) 23:13:31 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000040)="a62fae563a15ff940b7d16f5e8bdb484239b6abcbe308fadb7e940fd920432060c983faa02a7104632e621de5ccccae31d7c5857e68dea4e933b57992b", 0x3d}, 0x64) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000100), 0xc000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fff) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x36) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x2aa040) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0x1000) 23:13:31 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0186415, &(0x7f0000000080)={&(0x7f0000fec000/0xf000)=nil, 0x20af, 0x4, 0x31}) (async) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8010, r0, 0xd1) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000340)={0x10002, 0x0, &(0x7f0000fec000/0x2000)=nil}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) (async) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x18) (async) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}], &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0], 0x2, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000300)={0x82, r4, r5, 0xbbbbbbbb}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000380), 0x22a400, 0xe1) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4018641b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff2000/0xb000)=nil}) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil) 23:13:31 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000040)="a62fae563a15ff940b7d16f5e8bdb484239b6abcbe308fadb7e940fd920432060c983faa02a7104632e621de5ccccae31d7c5857e68dea4e933b57992b", 0x3d}, 0x64) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000100), 0xc000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fff) (async) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x36) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x80000) 23:13:31 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0186415, &(0x7f0000000080)={&(0x7f0000fec000/0xf000)=nil, 0x20af, 0x4, 0x31}) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8010, r0, 0xd1) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000340)={0x10002, 0x0, &(0x7f0000fec000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) (async) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x18) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}], &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0], 0x2, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01464ba, &(0x7f0000000300)={0x82, r4, r5, 0xbbbbbbbb}) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000380), 0x22a400, 0xe1) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4018641b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff2000/0xb000)=nil}) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil) (rerun: 32) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x80000) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x80000) (async) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x11, 0xffffffffffffffff, 0x80000000) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/24, 0x18, 0x0, &(0x7f0000000040)=""/85, 0x55}, &(0x7f0000000100)=0x40) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x11, 0xffffffffffffffff, 0x80000000) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x80000) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/24, 0x18, 0x0, &(0x7f0000000040)=""/85, 0x55}, &(0x7f0000000100)=0x40) 23:13:31 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x11) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3}]}) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0186415, &(0x7f0000000100)={&(0x7f0000c00000/0x400000)=nil, 0x3, 0x5, 0x10}) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x11, 0xffffffffffffffff, 0x80000000) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x1010, r0, 0x80000000) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/24, 0x18, 0x0, &(0x7f0000000040)=""/85, 0x55}, &(0x7f0000000100)=0x40) 23:13:31 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x11) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 64) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3}]}) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0186415, &(0x7f0000000100)={&(0x7f0000c00000/0x400000)=nil, 0x3, 0x5, 0x10}) 23:13:31 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x1e0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x1000)=nil, 0x1000}, 0x3}) 23:13:31 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x7f, 0x801) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x6200) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x1010, r0, 0x80000000) 23:13:31 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x1e0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x1000)=nil, 0x1000}, 0x3}) 23:13:31 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x11) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3}]}) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0186415, &(0x7f0000000100)={&(0x7f0000c00000/0x400000)=nil, 0x3, 0x5, 0x10}) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x1010, r0, 0x80000000) 23:13:31 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x7f, 0x801) (async) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x6200) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x1e0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x1000)=nil, 0x1000}, 0x3}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x1e0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x1000)=nil, 0x1000}, 0x3}) (async) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x408402, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) prctl$PR_SET_MM(0xf, 0x9, &(0x7f0000ff8000/0x2000)=nil) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x0) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0x1ff) 23:13:31 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x7f, 0x801) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x6200) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x408402, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) prctl$PR_SET_MM(0xf, 0x9, &(0x7f0000ff8000/0x2000)=nil) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x408402, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) (async) prctl$PR_SET_MM(0xf, 0x9, &(0x7f0000ff8000/0x2000)=nil) (async) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x0) (async) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r1, 0x400, 0x70bd2a, 0x2ddfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="b919bb80e36dae95730c9676722586989f17", 0x12, r0}, 0x64) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0x1ff) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0x1ff) (async) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x45, 0x1000e8, @vifc_lcl_ifindex=r3, @broadcast}, 0x10) ioctl$TCSETAF(r1, 0x5408, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, 0x100010, r1, 0x100000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x9}) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x408402, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) prctl$PR_SET_MM(0xf, 0x9, &(0x7f0000ff8000/0x2000)=nil) (async) prctl$PR_SET_MM(0xf, 0x9, &(0x7f0000ff8000/0x2000)=nil) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x0) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r1, 0x400, 0x70bd2a, 0x2ddfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="b919bb80e36dae95730c9676722586989f17", 0x12, r0}, 0x64) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r1, 0x400, 0x70bd2a, 0x2ddfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="b919bb80e36dae95730c9676722586989f17", 0x12, r0}, 0x64) (async) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0x1ff) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0x1ff) (async) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) (async) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x45, 0x1000e8, @vifc_lcl_ifindex=r3, @broadcast}, 0x10) (async) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, 0x100010, r1, 0x100000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x9}) 23:13:31 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}}, 0x880) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x8069, @vifc_lcl_addr=@multicast1, @loopback}, 0x10) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@private=0xa010101, @remote, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x800, 0x1, 0x0, 0xfffffffc}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 23:13:31 executing program 1: shmget(0x2, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb3, 0x801) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000040)={0x1, 0x7, 0x0, 0x4, 0x4}) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r1, 0x400, 0x70bd2a, 0x2ddfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="b919bb80e36dae95730c9676722586989f17", 0x12, r0}, 0x64) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x45, 0x1000e8, @vifc_lcl_ifindex=r3, @broadcast}, 0x10) (async) ioctl$TCSETAF(r1, 0x5408, 0x0) mmap$xdp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, 0x100010, r1, 0x100000000) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x9}) 23:13:31 executing program 1: shmget(0x2, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb3, 0x801) (async) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000040)={0x1, 0x7, 0x0, 0x4, 0x4}) 23:13:31 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}}, 0x880) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x8069, @vifc_lcl_addr=@multicast1, @loopback}, 0x10) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@private=0xa010101, @remote, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x800, 0x1, 0x0, 0xfffffffc}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@broadcast, @multicast2, 0xffffffffffffffff, "776ab94a3120f9fa0018f709631a186f5df1ab9c857ae1b9771957207aac5aab", 0x74, 0xfffffff8, 0xffff8eba, 0x2}, 0x3c) 23:13:31 executing program 1: shmget(0x2, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb3, 0x801) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb3, 0x801) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000040)={0x1, 0x7, 0x0, 0x4, 0x4}) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}) madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x16) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x2010, 0xffffffffffffffff, 0x1) 23:13:31 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}}, 0x880) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x8069, @vifc_lcl_addr=@multicast1, @loopback}, 0x10) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@private=0xa010101, @remote, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x800, 0x1, 0x0, 0xfffffffc}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}}, 0x880) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x8069, @vifc_lcl_addr=@multicast1, @loopback}, 0x10) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@private=0xa010101, @remote, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x800, 0x1, 0x0, 0xfffffffc}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) (async) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@broadcast, @multicast2, 0xffffffffffffffff, "776ab94a3120f9fa0018f709631a186f5df1ab9c857ae1b9771957207aac5aab", 0x74, 0xfffffff8, 0xffff8eba, 0x2}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@broadcast, @multicast2, 0xffffffffffffffff, "776ab94a3120f9fa0018f709631a186f5df1ab9c857ae1b9771957207aac5aab", 0x74, 0xfffffff8, 0xffff8eba, 0x2}, 0x3c) (async) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}) (async) madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x16) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x2010, 0xffffffffffffffff, 0x1) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}) (async) madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x16) (async) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x2010, 0xffffffffffffffff, 0x1) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@broadcast, @multicast2, 0xffffffffffffffff, "776ab94a3120f9fa0018f709631a186f5df1ab9c857ae1b9771957207aac5aab", 0x74, 0xfffffff8, 0xffff8eba, 0x2}, 0x3c) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) (async) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0xfffffffd}, 0x3c) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 3: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8814}, 0x800) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0xfffffffd}, 0x3c) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0xfffffffd}, 0x3c) (async) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:31 executing program 3: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8814}, 0x800) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf25040000000500380000000000a4299fdcb5e0bdfa94f9ab890e7ca822b151007f7e968728f4a81e61b1b4ec8a4b9f898ad3709a450ee29f1a6767b73c677491344e56287f1726320872e1854b991c75f5c10df9a3dd38ccefc16dc97a39686c6e81c6926108edc9cc482d2bf6cd81182a397c86f9ba1abd034be33a174fdda27629aaea88008e7a0d3c888dd70bcf2f356a1176024c0b2df4b4dd7e9c97a40f616ef3915d520f9dc0939da32368f7879db4d12940ba4d8c839fc37eb604406e1d82b7d4ad4c99d091b31ed2ff0ced989948dd16ab9350feadd0f1"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x8) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000ffdbdf250600000008000b000002000008003400ff01000008002c000900000008002b0006000000050033000200000008000600", @ANYRES32=0x0, @ANYBLOB="060028000000000005002e000100000008003c00ff070000080032007fffffff0a2e090365c84811220595ca19d0bfe60d9081162f0209d7af0ee998a48a07acb05deb4b751597ceea56d03b3ee128a8d2f59ed884d56e0d344c8872b97215c1bb4e8278da497c54b503bb615c836055dba19f9476aa4439857839af86dd9303ac322ed5eab63b4d5775b92085fe47b6f21405abc49190314c9bfaa8b872de3b25f3964bf278de47a16fd7613be9ed07911af0495686aebe6645f3"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x0, 0xfffffffd}, 0x3c) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) (async) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 23:13:31 executing program 3: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8814}, 0x800) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8814}, 0x800) (async) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf25040000000500380000000000a4299fdcb5e0bdfa94f9ab890e7ca822b151007f7e968728f4a81e61b1b4ec8a4b9f898ad3709a450ee29f1a6767b73c677491344e56287f1726320872e1854b991c75f5c10df9a3dd38ccefc16dc97a39686c6e81c6926108edc9cc482d2bf6cd81182a397c86f9ba1abd034be33a174fdda27629aaea88008e7a0d3c888dd70bcf2f356a1176024c0b2df4b4dd7e9c97a40f616ef3915d520f9dc0939da32368f7879db4d12940ba4d8c839fc37eb604406e1d82b7d4ad4c99d091b31ed2ff0ced989948dd16ab9350feadd0f1"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x8) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000ffdbdf250600000008000b000002000008003400ff01000008002c000900000008002b0006000000050033000200000008000600", @ANYRES32=0x0, @ANYBLOB="060028000000000005002e000100000008003c00ff070000080032007fffffff0a2e090365c84811220595ca19d0bfe60d9081162f0209d7af0ee998a48a07acb05deb4b751597ceea56d03b3ee128a8d2f59ed884d56e0d344c8872b97215c1bb4e8278da497c54b503bb615c836055dba19f9476aa4439857839af86dd9303ac322ed5eab63b4d5775b92085fe47b6f21405abc49190314c9bfaa8b872de3b25f3964bf278de47a16fd7613be9ed07911af0495686aebe6645f3"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x1}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) (async) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0x1) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0x82000000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf25040000000500380000000000a4299fdcb5e0bdfa94f9ab890e7ca822b151007f7e968728f4a81e61b1b4ec8a4b9f898ad3709a450ee29f1a6767b73c677491344e56287f1726320872e1854b991c75f5c10df9a3dd38ccefc16dc97a39686c6e81c6926108edc9cc482d2bf6cd81182a397c86f9ba1abd034be33a174fdda27629aaea88008e7a0d3c888dd70bcf2f356a1176024c0b2df4b4dd7e9c97a40f616ef3915d520f9dc0939da32368f7879db4d12940ba4d8c839fc37eb604406e1d82b7d4ad4c99d091b31ed2ff0ced989948dd16ab9350feadd0f1"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x8) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000ffdbdf250600000008000b000002000008003400ff01000008002c000900000008002b0006000000050033000200000008000600", @ANYRES32=0x0, @ANYBLOB="060028000000000005002e000100000008003c00ff070000080032007fffffff0a2e090365c84811220595ca19d0bfe60d9081162f0209d7af0ee998a48a07acb05deb4b751597ceea56d03b3ee128a8d2f59ed884d56e0d344c8872b97215c1bb4e8278da497c54b503bb615c836055dba19f9476aa4439857839af86dd9303ac322ed5eab63b4d5775b92085fe47b6f21405abc49190314c9bfaa8b872de3b25f3964bf278de47a16fd7613be9ed07911af0495686aebe6645f3"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x1}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ffb000/0x3000)=nil) (async) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0x1) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0x82000000) (async) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0x82000000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x1}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x1}) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) socket$inet6_udp(0xa, 0x2, 0x0) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0x1) (async) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0x1) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) (async) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0x82000000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) socket$inet6_udp(0xa, 0x2, 0x0) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 23:13:31 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async, rerun: 64) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) 23:13:31 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300001092b3b230ab000e432d7ba3d797b75efe43ac2911a41df27db77b10b4cc400bf83e4d4313344dbd33e1d711316925f3b801c3bb65db34b3589255367cdcbd95ed8bbc3f377e856f40770f866e88e7e929ba0f872031e944be0898", @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x80) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000003c0)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) ioctl$TCSETAF(r6, 0x5408, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000580)) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x8000, @vifc_lcl_ifindex=r5, @loopback}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x61802800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbdfedbaf4896d5b3d4815cd4000000", @ANYRES32=r5, @ANYBLOB="0500330000000000050035000200000008003c000600000005002d000100000008003900030000000500300000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1004}, 0x4c000) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0xc22, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x50}}, 0x4000) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x8, 0x6, 0x6e7b7a05, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async) 23:13:31 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:31 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) ioctl$TCSETAF(r2, 0x5408, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300001092b3b230ab000e432d7ba3d797b75efe43ac2911a41df27db77b10b4cc400bf83e4d4313344dbd33e1d711316925f3b801c3bb65db34b3589255367cdcbd95ed8bbc3f377e856f40770f866e88e7e929ba0f872031e944be0898", @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300001092b3b230ab000e432d7ba3d797b75efe43ac2911a41df27db77b10b4cc400bf83e4d4313344dbd33e1d711316925f3b801c3bb65db34b3589255367cdcbd95ed8bbc3f377e856f40770f866e88e7e929ba0f872031e944be0898", @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x80) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000003c0)=0x3, 0x4) (async) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000003c0)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) ioctl$TCSETAF(r6, 0x5408, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000580)) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x8000, @vifc_lcl_ifindex=r5, @loopback}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x61802800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbdfedbaf4896d5b3d4815cd4000000", @ANYRES32=r5, @ANYBLOB="0500330000000000050035000200000008003c000600000005002d000100000008003900030000000500300000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1004}, 0x4c000) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x61802800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbdfedbaf4896d5b3d4815cd4000000", @ANYRES32=r5, @ANYBLOB="0500330000000000050035000200000008003c000600000005002d000100000008003900030000000500300000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1004}, 0x4c000) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0xc22, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x50}}, 0x4000) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x8, 0x6, 0x6e7b7a05, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 23:13:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x80010, r0, 0x91fc5000) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x121080, 0x0) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x2, 0x8, @vifc_lcl_addr=@loopback, @private=0xa010102}, 0x10) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) 23:13:31 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) ioctl$TCSETAF(r2, 0x5408, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300001092b3b230ab000e432d7ba3d797b75efe43ac2911a41df27db77b10b4cc400bf83e4d4313344dbd33e1d711316925f3b801c3bb65db34b3589255367cdcbd95ed8bbc3f377e856f40770f866e88e7e929ba0f872031e944be0898", @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x80) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000003c0)=0x3, 0x4) (async) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000003c0)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) (async) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) ioctl$TCSETAF(r6, 0x5408, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000580)) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x8000, @vifc_lcl_ifindex=r5, @loopback}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x61802800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbdfedbaf4896d5b3d4815cd4000000", @ANYRES32=r5, @ANYBLOB="0500330000000000050035000200000008003c000600000005002d000100000008003900030000000500300000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1004}, 0x4c000) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0xc22, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x50}}, 0x4000) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x8, 0x6, 0x6e7b7a05, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 23:13:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x80010, r0, 0x91fc5000) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x121080, 0x0) 23:13:31 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x2, 0x8, @vifc_lcl_addr=@loopback, @private=0xa010102}, 0x10) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) 23:13:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x80010, r0, 0x91fc5000) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x121080, 0x0) 23:13:31 executing program 3: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ff8000/0x6000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="660fdadcbaf80c66b8ba5f708966efbafc0ced660f0666b9180b000066b89961000066ba000000000f3066b97803000066b80010000066ba000000000f300f350f0f9a0580aabaf80c66b8e859138b66efbafc0c66b8716e000066ef66b9800000c00f326635000800000f30f26f", 0x6e}], 0x1, 0x20, &(0x7f00000000c0), 0x0) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @empty, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x2, 0x8, @vifc_lcl_addr=@loopback, @private=0xa010102}, 0x10) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ff8000/0x6000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="660fdadcbaf80c66b8ba5f708966efbafc0ced660f0666b9180b000066b89961000066ba000000000f3066b97803000066b80010000066ba000000000f300f350f0f9a0580aabaf80c66b8e859138b66efbafc0c66b8716e000066ef66b9800000c00f326635000800000f30f26f", 0x6e}], 0x1, 0x20, &(0x7f00000000c0), 0x0) prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ff8000/0x6000)=nil) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="660fdadcbaf80c66b8ba5f708966efbafc0ced660f0666b9180b000066b89961000066ba000000000f3066b97803000066b80010000066ba000000000f300f350f0f9a0580aabaf80c66b8e859138b66efbafc0c66b8716e000066ef66b9800000c00f326635000800000f30f26f", 0x6e}], 0x1, 0x20, &(0x7f00000000c0), 0x0) (async) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) 23:13:32 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000100)=[r2, 0x0, r3], 0x3, 0x0, r4, 0xff, 0x4, 0x3000000, 0x7, {0x5, 0x2, 0x7, 0x7ff, 0x20, 0x2, 0x40, 0x4, 0x9, 0x7, 0x92f7, 0xff0, 0x95d0, 0x9, "a2d0886decd9959c76843c996045068aa9aaeff2d92d687d4c3809346b8b9a2a"}}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ff6000/0x3000)=nil, 0x7f, 0x1, 0x1}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ff8000/0x6000)=nil) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="660fdadcbaf80c66b8ba5f708966efbafc0ced660f0666b9180b000066b89961000066ba000000000f3066b97803000066b80010000066ba000000000f300f350f0f9a0580aabaf80c66b8e859138b66efbafc0c66b8716e000066ef66b9800000c00f326635000800000f30f26f", 0x6e}], 0x1, 0x20, &(0x7f00000000c0), 0x0) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) (async) 23:13:32 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="147c0000", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf250700000000e1409b3eb53a153f7973d8f244e3a96b959da785e356ae2370661b0a54e8e9c2dc8e916dfe11c9d8e853eb7fcd194dc33132d74289a30dbbbbdf0b69d5b42f030eb8f682cd58a6ab32e911ce7c131b3cb9a152241cc4ea7161c3c33cd44bf88fa00c90dc078ba5ea03a25b0f5f06a0baeed6ebd03b99302639ce3a555871e8fbd12db1a28a3189044b488aa3245b5cf17679daa4fba495c5a8f748d84b12347797edfb3785fe9f177a357019f81e15df6c806f7f9160b129373658ec4c84e582580f7a"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0xc000) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x86000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x9, 0x30, r0, 0x8000000) 23:13:32 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="147c0000", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf250700000000e1409b3eb53a153f7973d8f244e3a96b959da785e356ae2370661b0a54e8e9c2dc8e916dfe11c9d8e853eb7fcd194dc33132d74289a30dbbbbdf0b69d5b42f030eb8f682cd58a6ab32e911ce7c131b3cb9a152241cc4ea7161c3c33cd44bf88fa00c90dc078ba5ea03a25b0f5f06a0baeed6ebd03b99302639ce3a555871e8fbd12db1a28a3189044b488aa3245b5cf17679daa4fba495c5a8f748d84b12347797edfb3785fe9f177a357019f81e15df6c806f7f9160b129373658ec4c84e582580f7a"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0xc000) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) 23:13:32 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000100)=[r2, 0x0, r3], 0x3, 0x0, r4, 0xff, 0x4, 0x3000000, 0x7, {0x5, 0x2, 0x7, 0x7ff, 0x20, 0x2, 0x40, 0x4, 0x9, 0x7, 0x92f7, 0xff0, 0x95d0, 0x9, "a2d0886decd9959c76843c996045068aa9aaeff2d92d687d4c3809346b8b9a2a"}}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ff6000/0x3000)=nil, 0x7f, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ff6000/0x3000)=nil, 0x7f, 0x1, 0x1}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000100)=[r2, 0x0, r3], 0x3, 0x0, r4, 0xff, 0x4, 0x3000000, 0x7, {0x5, 0x2, 0x7, 0x7ff, 0x20, 0x2, 0x40, 0x4, 0x9, 0x7, 0x92f7, 0xff0, 0x95d0, 0x9, "a2d0886decd9959c76843c996045068aa9aaeff2d92d687d4c3809346b8b9a2a"}}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ff6000/0x3000)=nil, 0x7f, 0x1, 0x1}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="147c0000", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf250700000000e1409b3eb53a153f7973d8f244e3a96b959da785e356ae2370661b0a54e8e9c2dc8e916dfe11c9d8e853eb7fcd194dc33132d74289a30dbbbbdf0b69d5b42f030eb8f682cd58a6ab32e911ce7c131b3cb9a152241cc4ea7161c3c33cd44bf88fa00c90dc078ba5ea03a25b0f5f06a0baeed6ebd03b99302639ce3a555871e8fbd12db1a28a3189044b488aa3245b5cf17679daa4fba495c5a8f748d84b12347797edfb3785fe9f177a357019f81e15df6c806f7f9160b129373658ec4c84e582580f7a"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0xc000) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x86000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x9, 0x30, r0, 0x8000000) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x6, 0xffff, 0x2}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async, rerun: 32) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (rerun: 32) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x86000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x9, 0x30, r0, 0x8000000) 23:13:32 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000004, 0x20010, r0, 0xb8c2f000) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x6, 0xffff, 0x2}, 0x3c) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, 0xffffffffffffffff, "ff8afb44484f8ee200056e1d9e0f78186d4335042b811600", 0x0, 0xffffffff}, 0x3c) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xff, 0x1, @vifc_lcl_ifindex, @multicast2}, 0x10) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000004, 0x20010, r0, 0xb8c2f000) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, 0xffffffffffffffff, "ff8afb44484f8ee200056e1d9e0f78186d4335042b811600", 0x0, 0xffffffff}, 0x3c) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xff, 0x1, @vifc_lcl_ifindex, @multicast2}, 0x10) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x6, 0xffff, 0x2}, 0x3c) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb) 23:13:32 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000004, 0x20010, r0, 0xb8c2f000) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, 0xffffffffffffffff, "ff8afb44484f8ee200056e1d9e0f78186d4335042b811600", 0x0, 0xffffffff}, 0x3c) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xff, 0x1, @vifc_lcl_ifindex, @multicast2}, 0x10) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x1dd) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000440)={0x20, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}]}) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$ttyprintk(0xffffff9c, &(0x7f0000000280), 0x200, 0x0) sendto$l2tp6(r1, &(0x7f0000000080)="b1c2458b545e802f17b20068ded2784cf55be21f42cef269614a8f421228c2ee80a372cd3a9ffb965149453a52dc9a14eb663894cdc73cad879cd071a88b7fa8179d9f450f1953c123a40e976394ac34c0fa3e41f81d10380ca662ecc57067b3015663092e5c71a108fa2345f7b3ef6c0778d7c85b99e0a9e43bed6604ceb2276cd18fbc319d434536f64698f5e81463ca676695717c8e9506e41d6861", 0x9d, 0x4000804, &(0x7f0000000140)={0xa, 0x0, 0xffffff80, @mcast1, 0x9d, 0x1}, 0x20) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ffc000/0x1000)=nil) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$TCSETAF(r2, 0x5408, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20004000) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x3}, 0x20) 23:13:32 executing program 1: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000480)) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x9, 0x0, 0x56, &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000580)={0x0, 0x8, &(0x7f00000004c0)=[0x8, 0x9, 0x0, 0x2, 0x6, 0x6, 0x1, 0x1e7], &(0x7f0000000500)=[0x8, 0x6, 0x5, 0x401, 0x3, 0x7, 0x9], &(0x7f0000000540)=[0x41d, 0x608f]}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000005c0)={0x1, 0x14, 0x8, 0x80000001, 0x0, "0c1451137d78b0994ea1323706b2965ddafc40"}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@private2, @mcast2}) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f00000009c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x2a}}) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000580)={@loopback, @remote, 0x0, "792beca19e4532a72c03b6121ff09526101e9a18d4f744cb71ec1c362d240a9a", 0xffffffff, 0xd8c0, 0x8, 0x9}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ad4911b9598758b19c409c4135fdcaa71a6265d391ebcfa6f088e98d29746a1dc3d284dab5582774eac4ff4ff60b165c649ce4e2de3d06f6014806aca87e584322d9a66d3954ae41e379860e85f36fc76d0d2988d0", 0x55, 0xfffffffffffffffa) r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="45a93089a64c976b7eb083eb8938aa6b9d94016519b78a6d32e69a01e40f5196e607e982174d91e45d6cf191010fb51ec188295bfd32ca670507d9f18f7e8425b38b0f9f21b0169d3692e71cfbe88cb08c0a1bbef4de9f09577d02ce695a325b1e9628cac2a89916a598d58613a7ead96c26d226db00c1a01b37f3000d7bbbd93715ecdd5fcf619de359fa6085207585e36f9958f2794c2a", 0x98, 0xfffffffffffffffa) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="fb0e511b3cc15fee90f59b07a807b0987abc53d474b40b", 0x17, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r3, r4}, &(0x7f0000000440)=""/177, 0xa2, &(0x7f00000001c0)={&(0x7f0000000240)={'sm3-ce\x00'}, &(0x7f0000000280)="2e423f87cce4abab86db689da664d8d2ba7ededbf5c0bc8decc81171e99e342ce90d734de173c5d9f0ef2d2d37cb74640a303877d47c7a3fcb12473f29b930cc69", 0x3a}) mmap$qrtrtun(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x80010, r2, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x4, 0x8}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x6, 0x4, 0x9, 0x3}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000940)={&(0x7f0000000840)=[0x0, r6, r8, r9], 0x4, r11, r12, 0x18, 0x7, 0x1, 0x5, {0x4, 0x6, 0x40, 0x100, 0xa101, 0x200, 0x6, 0x8001, 0x2a2, 0x1000, 0x2, 0x0, 0x1, 0x4, "89d0824a2c4fc8a40bdf9abf81b93d3dd974264bb3b8428d10c912d3a6f6598c"}}) 23:13:32 executing program 1: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000480)) (async) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000480)) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x9, 0x0, 0x56, &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000580)={0x0, 0x8, &(0x7f00000004c0)=[0x8, 0x9, 0x0, 0x2, 0x6, 0x6, 0x1, 0x1e7], &(0x7f0000000500)=[0x8, 0x6, 0x5, 0x401, 0x3, 0x7, 0x9], &(0x7f0000000540)=[0x41d, 0x608f]}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000005c0)={0x1, 0x14, 0x8, 0x80000001, 0x0, "0c1451137d78b0994ea1323706b2965ddafc40"}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@private2, @mcast2}) 23:13:32 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x1dd) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000440)={0x20, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}]}) (async, rerun: 32) ioctl$TCSETAF(r0, 0x5408, 0x0) (async, rerun: 32) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$ttyprintk(0xffffff9c, &(0x7f0000000280), 0x200, 0x0) (async) sendto$l2tp6(r1, &(0x7f0000000080)="b1c2458b545e802f17b20068ded2784cf55be21f42cef269614a8f421228c2ee80a372cd3a9ffb965149453a52dc9a14eb663894cdc73cad879cd071a88b7fa8179d9f450f1953c123a40e976394ac34c0fa3e41f81d10380ca662ecc57067b3015663092e5c71a108fa2345f7b3ef6c0778d7c85b99e0a9e43bed6604ceb2276cd18fbc319d434536f64698f5e81463ca676695717c8e9506e41d6861", 0x9d, 0x4000804, &(0x7f0000000140)={0xa, 0x0, 0xffffff80, @mcast1, 0x9d, 0x1}, 0x20) (async) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ffc000/0x1000)=nil) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$TCSETAF(r2, 0x5408, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20004000) (rerun: 64) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x3}, 0x20) 23:13:32 executing program 1: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000480)) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x9, 0x0, 0x56, &(0x7f0000000040)}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000580)={0x0, 0x8, &(0x7f00000004c0)=[0x8, 0x9, 0x0, 0x2, 0x6, 0x6, 0x1, 0x1e7], &(0x7f0000000500)=[0x8, 0x6, 0x5, 0x401, 0x3, 0x7, 0x9], &(0x7f0000000540)=[0x41d, 0x608f]}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000005c0)={0x1, 0x14, 0x8, 0x80000001, 0x0, "0c1451137d78b0994ea1323706b2965ddafc40"}) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@private2, @mcast2}) 23:13:32 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff81}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080c2}, 0x880) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:32 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x1dd) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000440)={0x20, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{}, {}, {}]}) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$ttyprintk(0xffffff9c, &(0x7f0000000280), 0x200, 0x0) (async) sendto$l2tp6(r1, &(0x7f0000000080)="b1c2458b545e802f17b20068ded2784cf55be21f42cef269614a8f421228c2ee80a372cd3a9ffb965149453a52dc9a14eb663894cdc73cad879cd071a88b7fa8179d9f450f1953c123a40e976394ac34c0fa3e41f81d10380ca662ecc57067b3015663092e5c71a108fa2345f7b3ef6c0778d7c85b99e0a9e43bed6604ceb2276cd18fbc319d434536f64698f5e81463ca676695717c8e9506e41d6861", 0x9d, 0x4000804, &(0x7f0000000140)={0xa, 0x0, 0xffffff80, @mcast1, 0x9d, 0x1}, 0x20) (async) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ffc000/0x1000)=nil) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r3 = openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$TCSETAF(r2, 0x5408, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20004000) (async) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x3}, 0x20) [ 1992.794308][T20085] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 1992.826213][T20059] could not allocate digest TFM handle sm3-ce 23:13:32 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x3000000, 0x110, r0, 0x82000000) 23:13:32 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff81}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080c2}, 0x880) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f00000009c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x2a}}) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000580)={@loopback, @remote, 0x0, "792beca19e4532a72c03b6121ff09526101e9a18d4f744cb71ec1c362d240a9a", 0xffffffff, 0xd8c0, 0x8, 0x9}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ad4911b9598758b19c409c4135fdcaa71a6265d391ebcfa6f088e98d29746a1dc3d284dab5582774eac4ff4ff60b165c649ce4e2de3d06f6014806aca87e584322d9a66d3954ae41e379860e85f36fc76d0d2988d0", 0x55, 0xfffffffffffffffa) (async) r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="45a93089a64c976b7eb083eb8938aa6b9d94016519b78a6d32e69a01e40f5196e607e982174d91e45d6cf191010fb51ec188295bfd32ca670507d9f18f7e8425b38b0f9f21b0169d3692e71cfbe88cb08c0a1bbef4de9f09577d02ce695a325b1e9628cac2a89916a598d58613a7ead96c26d226db00c1a01b37f3000d7bbbd93715ecdd5fcf619de359fa6085207585e36f9958f2794c2a", 0x98, 0xfffffffffffffffa) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="fb0e511b3cc15fee90f59b07a807b0987abc53d474b40b", 0x17, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r3, r4}, &(0x7f0000000440)=""/177, 0xa2, &(0x7f00000001c0)={&(0x7f0000000240)={'sm3-ce\x00'}, &(0x7f0000000280)="2e423f87cce4abab86db689da664d8d2ba7ededbf5c0bc8decc81171e99e342ce90d734de173c5d9f0ef2d2d37cb74640a303877d47c7a3fcb12473f29b930cc69", 0x3a}) (async) mmap$qrtrtun(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x80010, r2, 0x400) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x4, 0x8}) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x6, 0x4, 0x9, 0x3}) (async) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r11}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000940)={&(0x7f0000000840)=[0x0, r6, r8, r9], 0x4, r11, r12, 0x18, 0x7, 0x1, 0x5, {0x4, 0x6, 0x40, 0x100, 0xa101, 0x200, 0x6, 0x8001, 0x2a2, 0x1000, 0x2, 0x0, 0x1, 0x4, "89d0824a2c4fc8a40bdf9abf81b93d3dd974264bb3b8428d10c912d3a6f6598c"}}) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="5d85e3c9", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf2502000000060028000100000005002e000000000008002b00060000000800390003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) [ 1992.848883][T20095] could not allocate digest TFM handle sm3-ce 23:13:32 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x3000000, 0x110, r0, 0x82000000) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="5d85e3c9", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf2502000000060028000100000005002e000000000008002b00060000000800390003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 23:13:32 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff81}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080c2}, 0x880) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff81}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080c2}, 0x880) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f00000009c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x2a}}) (async) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f00000009c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x2a}}) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000580)={@loopback, @remote, 0x0, "792beca19e4532a72c03b6121ff09526101e9a18d4f744cb71ec1c362d240a9a", 0xffffffff, 0xd8c0, 0x8, 0x9}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ad4911b9598758b19c409c4135fdcaa71a6265d391ebcfa6f088e98d29746a1dc3d284dab5582774eac4ff4ff60b165c649ce4e2de3d06f6014806aca87e584322d9a66d3954ae41e379860e85f36fc76d0d2988d0", 0x55, 0xfffffffffffffffa) r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="45a93089a64c976b7eb083eb8938aa6b9d94016519b78a6d32e69a01e40f5196e607e982174d91e45d6cf191010fb51ec188295bfd32ca670507d9f18f7e8425b38b0f9f21b0169d3692e71cfbe88cb08c0a1bbef4de9f09577d02ce695a325b1e9628cac2a89916a598d58613a7ead96c26d226db00c1a01b37f3000d7bbbd93715ecdd5fcf619de359fa6085207585e36f9958f2794c2a", 0x98, 0xfffffffffffffffa) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="fb0e511b3cc15fee90f59b07a807b0987abc53d474b40b", 0x17, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r3, r4}, &(0x7f0000000440)=""/177, 0xa2, &(0x7f00000001c0)={&(0x7f0000000240)={'sm3-ce\x00'}, &(0x7f0000000280)="2e423f87cce4abab86db689da664d8d2ba7ededbf5c0bc8decc81171e99e342ce90d734de173c5d9f0ef2d2d37cb74640a303877d47c7a3fcb12473f29b930cc69", 0x3a}) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r3, r4}, &(0x7f0000000440)=""/177, 0xa2, &(0x7f00000001c0)={&(0x7f0000000240)={'sm3-ce\x00'}, &(0x7f0000000280)="2e423f87cce4abab86db689da664d8d2ba7ededbf5c0bc8decc81171e99e342ce90d734de173c5d9f0ef2d2d37cb74640a303877d47c7a3fcb12473f29b930cc69", 0x3a}) mmap$qrtrtun(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x80010, r2, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x4, 0x8}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x6, 0x4, 0x9, 0x3}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000940)={&(0x7f0000000840)=[0x0, r6, r8, r9], 0x4, r11, r12, 0x18, 0x7, 0x1, 0x5, {0x4, 0x6, 0x40, 0x100, 0xa101, 0x200, 0x6, 0x8001, 0x2a2, 0x1000, 0x2, 0x0, 0x1, 0x4, "89d0824a2c4fc8a40bdf9abf81b93d3dd974264bb3b8428d10c912d3a6f6598c"}}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000940)={&(0x7f0000000840)=[0x0, r6, r8, r9], 0x4, r11, r12, 0x18, 0x7, 0x1, 0x5, {0x4, 0x6, 0x40, 0x100, 0xa101, 0x200, 0x6, 0x8001, 0x2a2, 0x1000, 0x2, 0x0, 0x1, 0x4, "89d0824a2c4fc8a40bdf9abf81b93d3dd974264bb3b8428d10c912d3a6f6598c"}}) 23:13:32 executing program 0: prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x3000000, 0x110, r0, 0x82000000) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="5d85e3c9", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf2502000000060028000100000005002e000000000008002b00060000000800390003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="5d85e3c9", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf2502000000060028000100000005002e000000000008002b00060000000800390003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) (async) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x4000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0xfffffffe, 0x0, 0x4}, 0x3) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket$xdp(0x2c, 0x3, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x5, 0x0, @vifc_lcl_addr=@broadcast, @multicast2}, 0x10) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'veth1_virt_wifi\x00'}}, 0x1e) socketpair(0x28, 0x800, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000004, 0x8010, r3, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8001}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x23a, 0x115ac0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x4, 0x2, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[r1, r2, r4, r6, 0x0, r7, 0x0], 0x7, 0x80000}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r9}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r11 = openat$ttyprintk(0xffffff9c, &(0x7f0000000680), 0x80, 0x0) ioctl$TIOCGSOFTCAR(r11, 0x5419, &(0x7f00000006c0)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r12}) r13 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r13, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r14}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000600)={&(0x7f00000005c0)=[r5, r9, r5, r5, r12], 0x5, 0x0, r14, 0x0, 0x0, 0x3, 0x0, {0xcd, 0x1f, 0x8, 0x8, 0xe24, 0x2e8, 0x44f5, 0x1f, 0x42af, 0xffff, 0x5, 0x2, 0x1ff, 0x2000000, "faf6bdb7d57131a5a6011bde3f128b3b32ffd1a4e5a30925a07639cee413ee06"}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x4}) r15 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r15, 0x5408, 0x0) setsockopt$MRT_ASSERT(r15, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) [ 1992.929513][T20106] could not allocate digest TFM handle sm3-ce 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0xfffffffe, 0x0, 0x4}, 0x3) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x5, 0x0, @vifc_lcl_addr=@broadcast, @multicast2}, 0x10) (async) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'veth1_virt_wifi\x00'}}, 0x1e) socketpair(0x28, 0x800, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) (async) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000004, 0x8010, r3, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8001}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) [ 1992.937052][T20108] could not allocate digest TFM handle sm3-ce 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)="d55773c8897cd2bddada25ae5496c5d9c418e923a759c0d18d8c626f14ae449ac461b438a0c08b7ee87c6047bf59871b9fa5cd50b6773b4512ff49f2da8d67cbd519b4944b6c46b959b76c98cf53acd4e3adb64ba91f772e001820f91e819497fb5e7ebb1d4fcfebcba98b81226b3ab85960388a270f4faae0e280bea06e0f098bcb24b7c4a0e151", 0x88}, 0x64) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0xfffffffe, 0x0, 0x4}, 0x3) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x5, 0x0, @vifc_lcl_addr=@broadcast, @multicast2}, 0x10) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'veth1_virt_wifi\x00'}}, 0x1e) socketpair(0x28, 0x800, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) (async) ioctl$TCSETAF(r3, 0x5408, 0x0) mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000004, 0x8010, r3, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8001}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 2: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000100)) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0xfffe, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x40}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff9000/0x4000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$qrtrtun(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r0, 0x7) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x1, 0x80, 0x4, @vifc_lcl_addr=@local, @empty}, 0x10) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x10000, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000180), 0x410840, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, "f963c6035675a06cbd77b45cb0a6aa3cf15ea0b22e3e4173ca8464f64d18aa2c", 0x6, 0x5, 0x8, 0x4870}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010100, 0xffffffffffffffff, "3108a8902b02ace06431daf0f1534a1e2f8a73f4b2fcf9cf34d43f3b4e91522f", 0x0, 0x1, 0x1f, 0x7fff}, 0x3c) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x23a, 0x115ac0) (async, rerun: 64) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x4, 0x2, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[r1, r2, r4, r6, 0x0, r7, 0x0], 0x7, 0x80000}) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r9}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) r11 = openat$ttyprintk(0xffffff9c, &(0x7f0000000680), 0x80, 0x0) ioctl$TIOCGSOFTCAR(r11, 0x5419, &(0x7f00000006c0)) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r12}) (async, rerun: 64) r13 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r13, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r14}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000600)={&(0x7f00000005c0)=[r5, r9, r5, r5, r12], 0x5, 0x0, r14, 0x0, 0x0, 0x3, 0x0, {0xcd, 0x1f, 0x8, 0x8, 0xe24, 0x2e8, 0x44f5, 0x1f, 0x42af, 0xffff, 0x5, 0x2, 0x1ff, 0x2000000, "faf6bdb7d57131a5a6011bde3f128b3b32ffd1a4e5a30925a07639cee413ee06"}}) (rerun: 32) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x4}) (async) r15 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r15, 0x5408, 0x0) (async, rerun: 32) setsockopt$MRT_ASSERT(r15, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) (rerun: 32) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)="d55773c8897cd2bddada25ae5496c5d9c418e923a759c0d18d8c626f14ae449ac461b438a0c08b7ee87c6047bf59871b9fa5cd50b6773b4512ff49f2da8d67cbd519b4944b6c46b959b76c98cf53acd4e3adb64ba91f772e001820f91e819497fb5e7ebb1d4fcfebcba98b81226b3ab85960388a270f4faae0e280bea06e0f098bcb24b7c4a0e151", 0x88}, 0x64) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)="d55773c8897cd2bddada25ae5496c5d9c418e923a759c0d18d8c626f14ae449ac461b438a0c08b7ee87c6047bf59871b9fa5cd50b6773b4512ff49f2da8d67cbd519b4944b6c46b959b76c98cf53acd4e3adb64ba91f772e001820f91e819497fb5e7ebb1d4fcfebcba98b81226b3ab85960388a270f4faae0e280bea06e0f098bcb24b7c4a0e151", 0x88}, 0x64) (async) 23:13:32 executing program 2: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000100)) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0xfffe, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x40}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff9000/0x4000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$qrtrtun(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r0, 0x7) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x1, 0x80, 0x4, @vifc_lcl_addr=@local, @empty}, 0x10) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x10000, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000180), 0x410840, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, "f963c6035675a06cbd77b45cb0a6aa3cf15ea0b22e3e4173ca8464f64d18aa2c", 0x6, 0x5, 0x8, 0x4870}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010100, 0xffffffffffffffff, "3108a8902b02ace06431daf0f1534a1e2f8a73f4b2fcf9cf34d43f3b4e91522f", 0x0, 0x1, 0x1f, 0x7fff}, 0x3c) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000100)) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0xfffe, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x40}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff9000/0x4000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r0, 0x7) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x1, 0x80, 0x4, @vifc_lcl_addr=@local, @empty}, 0x10) (async) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x10000, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000180), 0x410840, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) (async) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, "f963c6035675a06cbd77b45cb0a6aa3cf15ea0b22e3e4173ca8464f64d18aa2c", 0x6, 0x5, 0x8, 0x4870}, 0x3c) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010100, 0xffffffffffffffff, "3108a8902b02ace06431daf0f1534a1e2f8a73f4b2fcf9cf34d43f3b4e91522f", 0x0, 0x1, 0x1f, 0x7fff}, 0x3c) (async) 23:13:32 executing program 0: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x3}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)="d55773c8897cd2bddada25ae5496c5d9c418e923a759c0d18d8c626f14ae449ac461b438a0c08b7ee87c6047bf59871b9fa5cd50b6773b4512ff49f2da8d67cbd519b4944b6c46b959b76c98cf53acd4e3adb64ba91f772e001820f91e819497fb5e7ebb1d4fcfebcba98b81226b3ab85960388a270f4faae0e280bea06e0f098bcb24b7c4a0e151", 0x88}, 0x64) 23:13:32 executing program 0: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x3}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x3}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:32 executing program 2: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000100)) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0xfffe, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x40}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff9000/0x4000)=nil) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r0, 0x7) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x1, 0x80, 0x4, @vifc_lcl_addr=@local, @empty}, 0x10) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x10000, 0x0) (async) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000180), 0x410840, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, "f963c6035675a06cbd77b45cb0a6aa3cf15ea0b22e3e4173ca8464f64d18aa2c", 0x6, 0x5, 0x8, 0x4870}, 0x3c) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010100, 0xffffffffffffffff, "3108a8902b02ace06431daf0f1534a1e2f8a73f4b2fcf9cf34d43f3b4e91522f", 0x0, 0x1, 0x1f, 0x7fff}, 0x3c) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x23a, 0x115ac0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x4, 0x2, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[r1, r2, r4, r6, 0x0, r7, 0x0], 0x7, 0x80000}) (async, rerun: 32) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r9}) (async, rerun: 64) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r11 = openat$ttyprintk(0xffffff9c, &(0x7f0000000680), 0x80, 0x0) ioctl$TIOCGSOFTCAR(r11, 0x5419, &(0x7f00000006c0)) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r12}) r13 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r13, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r14}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000600)={&(0x7f00000005c0)=[r5, r9, r5, r5, r12], 0x5, 0x0, r14, 0x0, 0x0, 0x3, 0x0, {0xcd, 0x1f, 0x8, 0x8, 0xe24, 0x2e8, 0x44f5, 0x1f, 0x42af, 0xffff, 0x5, 0x2, 0x1ff, 0x2000000, "faf6bdb7d57131a5a6011bde3f128b3b32ffd1a4e5a30925a07639cee413ee06"}}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x4}) (async, rerun: 64) r15 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r15, 0x5408, 0x0) (async, rerun: 32) setsockopt$MRT_ASSERT(r15, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) (rerun: 32) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) mmap$dsp(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x200000c, 0x12, 0xffffffffffffffff, 0x0) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$xdp(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2000006, 0x13, r0, 0x84b4bccc89fe2bb1) 23:13:32 executing program 0: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x3}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) mmap$dsp(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x200000c, 0x12, 0xffffffffffffffff, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) mmap$dsp(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x200000c, 0x12, 0xffffffffffffffff, 0x0) (async) 23:13:32 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x0, 0x80) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000080)={0x0, 0x101, 0xd0, 0x6, 0x1, [], [0x6, 0x5, 0x10000], [0x7f, 0x200, 0x2, 0x1f], [0xd21, 0x401, 0x1, 0x1]}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:32 executing program 0: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc00c64b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) r2 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @loopback, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x0, 0x92}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ff6000/0xa000)=nil, 0xa000}) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) mmap$dsp(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x200000c, 0x12, 0xffffffffffffffff, 0x0) (async) mmap$dsp(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x200000c, 0x12, 0xffffffffffffffff, 0x0) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) mmap$xdp(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2000006, 0x13, r0, 0x84b4bccc89fe2bb1) 23:13:32 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x0, 0x80) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000080)={0x0, 0x101, 0xd0, 0x6, 0x1, [], [0x6, 0x5, 0x10000], [0x7f, 0x200, 0x2, 0x1f], [0xd21, 0x401, 0x1, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000080)={0x0, 0x101, 0xd0, 0x6, 0x1, [], [0x6, 0x5, 0x10000], [0x7f, 0x200, 0x2, 0x1f], [0xd21, 0x401, 0x1, 0x1]}) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) mmap$xdp(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2000006, 0x13, r0, 0x84b4bccc89fe2bb1) 23:13:32 executing program 1: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x0, 0x80) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000080)={0x0, 0x101, 0xd0, 0x6, 0x1, [], [0x6, 0x5, 0x10000], [0x7f, 0x200, 0x2, 0x1f], [0xd21, 0x401, 0x1, 0x1]}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x9) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 0: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc00c64b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) r2 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @loopback, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x0, 0x92}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ff6000/0xa000)=nil, 0xa000}) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ffb000/0x3000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x9) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 1: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/148, 0x94, 0x0, &(0x7f0000000180)=""/179, 0xb3}, &(0x7f0000000280)=0x40) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb5, 0x328a80) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000040)={0x4, 0x3f, 0x10000, 0x733a, 0x6}) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ffb000/0x3000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x9) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 1: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/148, 0x94, 0x0, &(0x7f0000000180)=""/179, 0xb3}, &(0x7f0000000280)=0x40) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb5, 0x328a80) (async) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000040)={0x4, 0x3f, 0x10000, 0x733a, 0x6}) 23:13:32 executing program 0: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc00c64b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) r2 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @loopback, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x0, 0x92}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @loopback, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x4, 0x0, 0x92}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ff6000/0xa000)=nil, 0xa000}) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x6, &(0x7f0000ffb000/0x3000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) set_mempolicy_home_node(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x0) 23:13:32 executing program 1: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/148, 0x94, 0x0, &(0x7f0000000180)=""/179, 0xb3}, &(0x7f0000000280)=0x40) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb5, 0x328a80) (async) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000040)={0x4, 0x3f, 0x10000, 0x733a, 0x6}) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) set_mempolicy_home_node(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x0) 23:13:32 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x64000, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000000080)="ca0d2b49d0514413c5f3a4a6799427eb2f81ace4ea3ad12f67ee357dfa323fce7f50f251b2bbe0d862142b0424ba605139c97a905d609b8fae11149f2ff7eeabb2ee2b956a77a9714f6f8900efd8424f85ef5b88e8405313874703042a6903", 0x5f, r1}, 0x64) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x9, 0x7, @vifc_lcl_addr=@broadcast, @local}, 0x10) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ffc000/0x1000)=nil) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x8) 23:13:32 executing program 0: r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000480)={0x3, 0x0, 0x1f, 0x0, 0x159, &(0x7f0000000080)}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000004c0)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x20000000, 0x0, 0x2}, 0xffffffffffffff74) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) set_mempolicy_home_node(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) set_mempolicy_home_node(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x0) (async) 23:13:32 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x64000, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000000080)="ca0d2b49d0514413c5f3a4a6799427eb2f81ace4ea3ad12f67ee357dfa323fce7f50f251b2bbe0d862142b0424ba605139c97a905d609b8fae11149f2ff7eeabb2ee2b956a77a9714f6f8900efd8424f85ef5b88e8405313874703042a6903", 0x5f, r1}, 0x64) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x9, 0x7, @vifc_lcl_addr=@broadcast, @local}, 0x10) 23:13:32 executing program 0: r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000480)={0x3, 0x0, 0x1f, 0x0, 0x159, &(0x7f0000000080)}) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000004c0)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x20000000, 0x0, 0x2}, 0xffffffffffffff74) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ffc000/0x1000)=nil) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ffc000/0x1000)=nil) (async) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x8) (async) 23:13:32 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x64000, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000000080)="ca0d2b49d0514413c5f3a4a6799427eb2f81ace4ea3ad12f67ee357dfa323fce7f50f251b2bbe0d862142b0424ba605139c97a905d609b8fae11149f2ff7eeabb2ee2b956a77a9714f6f8900efd8424f85ef5b88e8405313874703042a6903", 0x5f, r1}, 0x64) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x9, 0x7, @vifc_lcl_addr=@broadcast, @local}, 0x10) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010101, @loopback, 0xffff, "7350836fd23f7fffa92c7278186d4335042b841600", 0x7fffffff, 0x2, 0xffffff56, 0xfffffffa}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x1, &(0x7f0000ffc000/0x1000)=nil) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x8) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010101, @loopback, 0xffff, "7350836fd23f7fffa92c7278186d4335042b841600", 0x7fffffff, 0x2, 0xffffff56, 0xfffffffa}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 0: r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000480)={0x3, 0x0, 0x1f, 0x0, 0x159, &(0x7f0000000080)}) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000004c0)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x20000000, 0x0, 0x2}, 0xffffffffffffff74) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="5d85e3c9", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf2502000000060028000100000005002e000000000008002b00060000000800390003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x3000)=nil, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) socketpair(0x1a, 0x800, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{@fixed}]}) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)="1250e75ece3496ecc99c968ed4582ee128022763834ad185c627f23560b29d301fe97a18a6f1e9642eb0410407fe5ffb36a7dc8d30220b5f07a58f97ddf60334002a0bc8fad52f42f08b5adf6e1b53af082129047ad8fe7c33c0dd96293661c2f0fef1b8e1821545e9d0ff6a24454972cea79ce122d7a18ca51a50d812bbfee2101f89f5477ecdf05896839721119973b1abc96826", 0x95, r1}, 0x64) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010101, @loopback, 0xffff, "7350836fd23f7fffa92c7278186d4335042b841600", 0x7fffffff, 0x2, 0xffffff56, 0xfffffffa}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010101, @loopback, 0xffff, "7350836fd23f7fffa92c7278186d4335042b841600", 0x7fffffff, 0x2, 0xffffff56, 0xfffffffa}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 23:13:32 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) socketpair(0x1a, 0x800, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{@fixed}]}) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)="1250e75ece3496ecc99c968ed4582ee128022763834ad185c627f23560b29d301fe97a18a6f1e9642eb0410407fe5ffb36a7dc8d30220b5f07a58f97ddf60334002a0bc8fad52f42f08b5adf6e1b53af082129047ad8fe7c33c0dd96293661c2f0fef1b8e1821545e9d0ff6a24454972cea79ce122d7a18ca51a50d812bbfee2101f89f5477ecdf05896839721119973b1abc96826", 0x95, r1}, 0x64) (async, rerun: 32) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (rerun: 32) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x608002) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x80) 23:13:32 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x8000, 0x7fff}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x80010, r0, 0x91fc5000) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x121080, 0x0) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) socketpair(0x1a, 0x800, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{@fixed}]}) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)="1250e75ece3496ecc99c968ed4582ee128022763834ad185c627f23560b29d301fe97a18a6f1e9642eb0410407fe5ffb36a7dc8d30220b5f07a58f97ddf60334002a0bc8fad52f42f08b5adf6e1b53af082129047ad8fe7c33c0dd96293661c2f0fef1b8e1821545e9d0ff6a24454972cea79ce122d7a18ca51a50d812bbfee2101f89f5477ecdf05896839721119973b1abc96826", 0x95, r1}, 0x64) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x608002) socket$xdp(0x2c, 0x3, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x80) 23:13:32 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x8000, 0x7fff}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x8000, 0x7fff}, 0x3c) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:32 executing program 3: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x11) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3}]}) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0186415, &(0x7f0000000100)={&(0x7f0000c00000/0x400000)=nil, 0x3, 0x5, 0x10}) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x40, 0x2, 0x3}, 0x3c) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x2000)=nil, 0x2000}, 0x4}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/73, 0x49, 0x1, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001140)=0x40) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x608002) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x80) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x40, 0x2, 0x3}, 0x3c) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x2000)=nil, 0x2000}, 0x4}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/73, 0x49, 0x1, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001140)=0x40) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x40, 0x2, 0x3}, 0x3c) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x2000)=nil, 0x2000}, 0x4}) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/73, 0x49, 0x1, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001140)=0x40) (async) 23:13:32 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x8000, 0x7fff}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x0, 0x8000, 0x7fff}, 0x3c) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) 23:13:32 executing program 3: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00007fd000/0x800000)=nil}) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x2, "1530af", 0x3, 0xff}) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x40, 0x2, 0x3}, 0x3c) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x2000)=nil, 0x2000}, 0x4}) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/73, 0x49, 0x1, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001140)=0x40) 23:13:32 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000040)={0x0, 0x3fb, 0x3, 0x0, 0x2, [0x0, 0x0, 0x0], [0x100, 0x4, 0x2, 0x81], [0x3ff, 0x4, 0xfffffffb, 0x6], [0x2, 0x0, 0x0, 0x7827]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, r2, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764936fd23f7fffbe2c72e60e13152f0b78186d2b841600000000001000", 0x0, 0x7c9d}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0xe400, 0x0) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x2, "1530af", 0x3, 0xff}) 23:13:32 executing program 3: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000007e545fb21cd8c24da4c60921f7397517f84dc244e7d97b", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="08003e005f000000050035005d0000000500370001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, 0xffffffffffffffff, "5abe61ed1f0b96a5580405000000c00000000000000000000700", 0xb15, 0x100000, 0xa0, 0x6}, 0x1e) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000240)={@local, @empty, 0x0, "5940c09deafd958010d29ef896008e0b3dde9d4b3ea1981f0746b589703b0391", 0xf8, 0x2, 0x5, 0x7f}, 0x3c) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000007c0)={0x3, 0x0, 0x5, 0x16, 0x16, &(0x7f00000003c0)}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x8041) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r5, r8, 0x0, 0x3, 0x101, 0x6, 0x5, 0x7ff, 0x85, 0x400, 0xffff}) 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764936fd23f7fffbe2c72e60e13152f0b78186d2b841600000000001000", 0x0, 0x7c9d}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0xe400, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764936fd23f7fffbe2c72e60e13152f0b78186d2b841600000000001000", 0x0, 0x7c9d}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) (async) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0xe400, 0x0) (async) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[r1, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x80000001, @vifc_lcl_addr=@local, @loopback}, 0x10) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@mcast2, @private1}) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000180)="16e39a6c04680160076a966c162071b142ae45b4f3fc47035aff6941848d88dfef9beca646a75ce48771146b56415688e0bef3bd4a4a767d61cd4d1d9ad36a26bdd7ac3e15c1aee4170a89aa4b14d8a8ab6fc7364523270779777c9742e69dac7637f9afb6904039db3556f37847eea4eea84a3129e18ecc221dadf33f95a6a5b56d126cc26e6ffde24b1e0a075ea5a778ef92302db463599f200b0c88682c71a2793db83afeb6510064f81c772aca6c8b79e2e36500") [ 1993.352004][T20349] ptm ptm0: ldisc open failed (-12), clearing slot 0 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x2, "1530af", 0x3, 0xff}) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async, rerun: 32) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[r1, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x80000001, @vifc_lcl_addr=@local, @loopback}, 0x10) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@mcast2, @private1}) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000180)="16e39a6c04680160076a966c162071b142ae45b4f3fc47035aff6941848d88dfef9beca646a75ce48771146b56415688e0bef3bd4a4a767d61cd4d1d9ad36a26bdd7ac3e15c1aee4170a89aa4b14d8a8ab6fc7364523270779777c9742e69dac7637f9afb6904039db3556f37847eea4eea84a3129e18ecc221dadf33f95a6a5b56d126cc26e6ffde24b1e0a075ea5a778ef92302db463599f200b0c88682c71a2793db83afeb6510064f81c772aca6c8b79e2e36500") 23:13:32 executing program 2: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764936fd23f7fffbe2c72e60e13152f0b78186d2b841600000000001000", 0x0, 0x7c9d}, 0x3c) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0xe400, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764936fd23f7fffbe2c72e60e13152f0b78186d2b841600000000001000", 0x0, 0x7c9d}, 0x3c) (async) prctl$PR_SET_MM(0xf, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) (async) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0xe400, 0x0) (async) 23:13:32 executing program 3: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000007e545fb21cd8c24da4c60921f7397517f84dc244e7d97b", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="08003e005f000000050035005d0000000500370001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, 0xffffffffffffffff, "5abe61ed1f0b96a5580405000000c00000000000000000000700", 0xb15, 0x100000, 0xa0, 0x6}, 0x1e) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000240)={@local, @empty, 0x0, "5940c09deafd958010d29ef896008e0b3dde9d4b3ea1981f0746b589703b0391", 0xf8, 0x2, 0x5, 0x7f}, 0x3c) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) r6 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000007c0)={0x3, 0x0, 0x5, 0x16, 0x16, &(0x7f00000003c0)}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x8041) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, r5, r8, 0x0, 0x3, 0x101, 0x6, 0x5, 0x7ff, 0x85, 0x400, 0xffff}) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[r1, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x80000001, @vifc_lcl_addr=@local, @loopback}, 0x10) (async, rerun: 32) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@mcast2, @private1}) (rerun: 32) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000180)="16e39a6c04680160076a966c162071b142ae45b4f3fc47035aff6941848d88dfef9beca646a75ce48771146b56415688e0bef3bd4a4a767d61cd4d1d9ad36a26bdd7ac3e15c1aee4170a89aa4b14d8a8ab6fc7364523270779777c9742e69dac7637f9afb6904039db3556f37847eea4eea84a3129e18ecc221dadf33f95a6a5b56d126cc26e6ffde24b1e0a075ea5a778ef92302db463599f200b0c88682c71a2793db83afeb6510064f81c772aca6c8b79e2e36500") 23:13:32 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1f, 0xffffffff}, 0x20) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000001c0), 0x10102, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00000000b5c1936a001909000000"], 0x14}}, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x72}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004014) 23:13:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:32 executing program 2: setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xff, 0xffffffff, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x40000) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @private=0xa010101, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x8}, 0x3c) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}}) prctl$PR_SET_MM(0x25, 0x7, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1f, 0xffffffff}, 0x20) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000001c0), 0x10102, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00000000b5c1936a001909000000"], 0x14}}, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x72}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004014) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1f, 0xffffffff}, 0x20) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000001c0), 0x10102, 0x4) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00000000b5c1936a001909000000"], 0x14}}, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x72}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004014) (async) 23:13:32 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x50280, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={r1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x1000, 0x7, 0x6, 0x80, 0x441, 0x2, 0x800, 0x4], &(0x7f0000000240)=[0xa5c, 0x200, 0x89d0]}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x0, &(0x7f0000000080), 0x36, 0x1, 0x2, 0x4, 0x6, 0x2, 0x6, 'syz0\x00'}) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @private=0xa010101, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x8}, 0x3c) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}}) (async) prctl$PR_SET_MM(0x25, 0x7, &(0x7f0000ff8000/0x6000)=nil) 23:13:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:32 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1f, 0xffffffff}, 0x20) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000001c0), 0x10102, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00000000b5c1936a001909000000"], 0x14}}, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x72}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004014) 23:13:32 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x4200) 23:13:32 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @private=0xa010101, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416", 0x0, 0x8}, 0x3c) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}}) (async, rerun: 64) prctl$PR_SET_MM(0x25, 0x7, &(0x7f0000ff8000/0x6000)=nil) (rerun: 64) 23:13:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:32 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x4200) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x9d02943bfa01c905) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x9, 0x3, 0x5, 0x66, 0x15, "1320d46c3429d1b6"}) 23:13:32 executing program 0: openat$hwrng(0xffffff9c, &(0x7f0000000040), 0xb00, 0x0) r0 = userfaultfd(0x80000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x50, r0, 0xd8ddd000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x8000, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x4, &(0x7f0000ff9000/0x2000)=nil) 23:13:32 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x4200) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x9d02943bfa01c905) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x9, 0x3, 0x5, 0x66, 0x15, "1320d46c3429d1b6"}) 23:13:32 executing program 3: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xc665e000) 23:13:32 executing program 2: syz_open_dev$usbfs(0x0, 0xfb1, 0x4200) 23:13:32 executing program 3: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xc665e000) 23:13:32 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x9d02943bfa01c905) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x9d02943bfa01c905) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x9, 0x3, 0x5, 0x66, 0x15, "1320d46c3429d1b6"}) 23:13:32 executing program 0: openat$hwrng(0xffffff9c, &(0x7f0000000040), 0xb00, 0x0) (async) r0 = userfaultfd(0x80000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x50, r0, 0xd8ddd000) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x8000, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x4, &(0x7f0000ff9000/0x2000)=nil) 23:13:33 executing program 2: syz_open_dev$usbfs(0x0, 0xfb1, 0x4200) 23:13:33 executing program 3: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xc665e000) 23:13:33 executing program 0: openat$hwrng(0xffffff9c, &(0x7f0000000040), 0xb00, 0x0) r0 = userfaultfd(0x80000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x50, r0, 0xd8ddd000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x8000, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x4, &(0x7f0000ff9000/0x2000)=nil) 23:13:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x80, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x3db6e54f6c79a48b}, 0x4000080) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000340)={0x8, 0xffb8, 0x7ff, 0x3, 0x3, 0xff}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:33 executing program 2: syz_open_dev$usbfs(0x0, 0xfb1, 0x4200) 23:13:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x80, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x3db6e54f6c79a48b}, 0x4000080) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) (async) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000340)={0x8, 0xffb8, 0x7ff, 0x3, 0x3, 0xff}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:33 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 23:13:33 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x4200) 23:13:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x80, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x3db6e54f6c79a48b}, 0x4000080) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) (async) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000340)={0x8, 0xffb8, 0x7ff, 0x3, 0x3, 0xff}) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:33 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) (async) 23:13:33 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x4200) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x98580) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:33 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x4200) 23:13:33 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x98580) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) 23:13:33 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) remap_file_pages(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x6, 0x7fff, 0x100000) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:33 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x0) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x98580) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:33 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async, rerun: 64) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async, rerun: 64) remap_file_pages(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x6, 0x7fff, 0x100000) 23:13:33 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x0) 23:13:33 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) remap_file_pages(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x6, 0x7fff, 0x100000) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xc665e000) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf250400000008003900010000000a0009004cceabb3c6cc0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x11f, 0x0}, 0x8) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4723}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r1, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) socketpair(0x27, 0x4, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000480)={0xffffe227, 0xffffffff, 0xffffe9a9, 0x10000, 0x19, "9a17ce462fc3f9130afa2dbae46e3c75a58708"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@ptr={0x7, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x61, 0x5f, 0x30]}}, &(0x7f0000000500)=""/147, 0x2a, 0x93}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r6 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) ioctl$KDENABIO(r6, 0x4b36) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4080004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000044) 23:13:33 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb1, 0x0) 23:13:33 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x4000}) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf250400000008003900010000000a0009004cceabb3c6cc0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x11f, 0x0}, 0x8) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4723}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x50) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r1, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) (async) socketpair(0x27, 0x4, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000480)={0xffffe227, 0xffffffff, 0xffffe9a9, 0x10000, 0x19, "9a17ce462fc3f9130afa2dbae46e3c75a58708"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@ptr={0x7, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x61, 0x5f, 0x30]}}, &(0x7f0000000500)=""/147, 0x2a, 0x93}, 0x20) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) ioctl$KDENABIO(r6, 0x4b36) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4080004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000044) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x5, r3, 0x6, 0x4, 0x2, 0x9, 0x40}) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000180)="c441b9e84700f08092886b77807a0f20c035040000000f22c00fc7af00900000430f0966b812008ee8c461b975c9420f09f30f2d530066ba400066ed", 0x3c}], 0x1, 0x61, &(0x7f0000000200)=[@flags={0x3, 0x82200}, @cr4={0x1, 0x104000}], 0x2) 23:13:33 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x4000}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x4000}) (async) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf250400000008003900010000000a0009004cceabb3c6cc0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf250400000008003900010000000a0009004cceabb3c6cc0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x11f}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x11f, 0x0}, 0x8) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) (async) ioctl$TCSETAF(r2, 0x5408, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4723}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r1, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) socketpair(0x27, 0x4, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000480)={0xffffe227, 0xffffffff, 0xffffe9a9, 0x10000, 0x19, "9a17ce462fc3f9130afa2dbae46e3c75a58708"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@ptr={0x7, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x61, 0x5f, 0x30]}}, &(0x7f0000000500)=""/147, 0x2a, 0x93}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@ptr={0x7, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x61, 0x5f, 0x30]}}, &(0x7f0000000500)=""/147, 0x2a, 0x93}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r6 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) ioctl$KDENABIO(r6, 0x4b36) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4080004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000044) 23:13:33 executing program 0: setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @broadcast, 0x0, "0764836fd23f7fffbe2c72e60e13152febb8566e0dbc0b78186d4335042b8416"}, 0x3c) (async) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff8000/0x6000)=nil) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x4000}) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x5, r3, 0x6, 0x4, 0x2, 0x9, 0x40}) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000180)="c441b9e84700f08092886b77807a0f20c035040000000f22c00fc7af00900000430f0966b812008ee8c461b975c9420f09f30f2d530066ba400066ed", 0x3c}], 0x1, 0x61, &(0x7f0000000200)=[@flags={0x3, 0x82200}, @cr4={0x1, 0x104000}], 0x2) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) fanotify_init(0x8, 0x8d400) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x5, r3, 0x6, 0x4, 0x2, 0x9, 0x40}) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0) r5 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000180)="c441b9e84700f08092886b77807a0f20c035040000000f22c00fc7af00900000430f0966b812008ee8c461b975c9420f09f30f2d530066ba400066ed", 0x3c}], 0x1, 0x61, &(0x7f0000000200)=[@flags={0x3, 0x82200}, @cr4={0x1, 0x104000}], 0x2) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0xc665e000) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) fanotify_init(0x8, 0x8d400) syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) fanotify_init(0x8, 0x8d400) (async) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x5, r3, 0x6, 0x4, 0x2, 0x9, 0x40}) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0) r4 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, 0x0) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0xc665e000) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) (async) fanotify_init(0x8, 0x8d400) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x5, r3, 0x6, 0x4, 0x2, 0x9, 0x40}) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0xc665e000) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfae, 0x0) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x5, r3, 0x6, 0x4, 0x2, 0x9, 0x40}) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x240100, 0x0) 23:13:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xc665e000) 23:13:33 executing program 0: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xc665e000) 23:13:33 executing program 0: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xc665e000) 23:13:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xc665e000) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x5, r3, 0x6, 0x4, 0x2, 0x9, 0x40}) prctl$PR_SET_MM(0xf, 0xa, &(0x7f0000ff8000/0x6000)=nil) 23:13:33 executing program 0: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xc665e000) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfae, 0x0) 23:13:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xc665e000) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r2, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x5, r3, 0x6, 0x4, 0x2, 0x9, 0x40}) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r1, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 3: prctl$PR_SET_MM(0xf, 0x20ffffff, &(0x7f0000ff8000/0x6000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x800100) mmap$usbmon(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1000004, 0x30, r0, 0x1) syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x40) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfae, 0x0) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r1, 0x80000000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) 23:13:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x2) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r0, 0x80000000) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, 0xffffffffffffffff, 0x80000000) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x4000) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xc665e000) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, 0xffffffffffffffff, 0x80000000) 23:13:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x2) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, 0xffffffffffffffff, 0x80000000) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xc665e000) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x4000) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xc665e000) 23:13:33 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x4000) 23:13:33 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r0, 0x80000000) 23:13:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x2) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xc665e000) 23:13:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 1) 23:13:33 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r0, 0x80000000) 23:13:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xc665e000) [ 1994.054551][T20626] FAULT_INJECTION: forcing a failure. [ 1994.054551][T20626] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.060371][T20626] CPU: 0 PID: 20626 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 23:13:33 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x80000000) 23:13:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xc665e000) [ 1994.065034][T20626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1994.069333][T20626] Call Trace: [ 1994.070762][T20626] [ 1994.071848][T20626] dump_stack_lvl+0x136/0x150 [ 1994.073584][T20626] should_fail_ex+0x4a3/0x5b0 [ 1994.075500][T20626] should_failslab+0x9/0x20 [ 1994.077338][T20626] kmem_cache_alloc+0x63/0x3b0 [ 1994.079445][T20626] vm_area_dup+0x23/0x300 [ 1994.081140][T20626] __split_vma+0x199/0x830 [ 1994.082901][T20626] ? expand_stack+0x20/0x20 23:13:33 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x80000000) [ 1994.084723][T20626] ? find_held_lock+0x2d/0x110 [ 1994.086586][T20626] do_vmi_align_munmap+0x2bc/0x1580 [ 1994.088978][T20626] ? __split_vma+0x830/0x830 [ 1994.091074][T20626] ? mtree_range_walk+0x63e/0x940 [ 1994.093371][T20626] do_vmi_munmap+0x26e/0x2c0 [ 1994.095188][T20626] mmap_region+0x1f0/0x28d0 [ 1994.096924][T20626] ? arch_get_unmapped_area+0x560/0x560 [ 1994.099447][T20626] ? validate_mm+0x1d4/0x290 [ 1994.101093][T20626] ? do_munmap+0xf0/0xf0 [ 1994.102618][T20626] ? security_mmap_addr+0x77/0xa0 [ 1994.104387][T20626] ? get_unmapped_area+0x1e8/0x3c0 [ 1994.106350][T20626] do_mmap+0x831/0xf60 [ 1994.108163][T20626] vm_mmap_pgoff+0x1a2/0x3b0 [ 1994.110335][T20626] ? randomize_page+0xb0/0xb0 [ 1994.112527][T20626] ksys_mmap_pgoff+0x41f/0x5a0 [ 1994.114761][T20626] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1994.117098][T20626] __do_fast_syscall_32+0x65/0xf0 [ 1994.119407][T20626] do_fast_syscall_32+0x33/0x70 [ 1994.121190][T20626] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1994.123829][T20626] RIP: 0023:0xf7fb1579 [ 1994.125721][T20626] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1994.133814][T20626] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1994.137304][T20626] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1994.140826][T20626] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1994.144257][T20626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1994.147468][T20626] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1994.150775][T20626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1994.154090][T20626] [ 1994.155622][ C0] vkms_vblank_simulate: vblank timer overrun 23:13:33 executing program 3: syz_open_dev$usbfs(0x0, 0xfae, 0x2) 23:13:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xc665e000) 23:13:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 2) 23:13:33 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x80000000) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 23:13:33 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x80000000) [ 1994.182276][T20641] FAULT_INJECTION: forcing a failure. 23:13:33 executing program 3: syz_open_dev$usbfs(0x0, 0xfae, 0x2) [ 1994.182276][T20641] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.189097][T20641] CPU: 3 PID: 20641 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1994.193653][T20641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1994.197489][T20641] Call Trace: [ 1994.198936][T20641] [ 1994.200196][T20641] dump_stack_lvl+0x136/0x150 23:13:33 executing program 2: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x80000000) [ 1994.202420][T20641] should_fail_ex+0x4a3/0x5b0 [ 1994.204729][T20641] should_failslab+0x9/0x20 [ 1994.206702][T20641] kmem_cache_alloc+0x63/0x3b0 [ 1994.208799][T20641] vm_area_dup+0x55/0x300 23:13:33 executing program 3: syz_open_dev$usbfs(0x0, 0xfae, 0x2) [ 1994.210678][T20641] __split_vma+0x199/0x830 [ 1994.212812][T20641] ? expand_stack+0x20/0x20 [ 1994.214813][T20641] ? find_held_lock+0x2d/0x110 [ 1994.216945][T20641] do_vmi_align_munmap+0x2bc/0x1580 [ 1994.219196][T20641] ? __split_vma+0x830/0x830 23:13:33 executing program 2: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x80000000) [ 1994.221230][T20641] ? mtree_range_walk+0x63e/0x940 [ 1994.223556][T20641] do_vmi_munmap+0x26e/0x2c0 [ 1994.225587][T20641] mmap_region+0x1f0/0x28d0 [ 1994.227575][T20641] ? arch_get_unmapped_area+0x560/0x560 [ 1994.229945][T20641] ? validate_mm+0x1d4/0x290 [ 1994.231948][T20641] ? do_munmap+0xf0/0xf0 [ 1994.233782][T20641] ? security_mmap_addr+0x77/0xa0 [ 1994.235960][T20641] ? get_unmapped_area+0x1e8/0x3c0 [ 1994.238178][T20641] do_mmap+0x831/0xf60 [ 1994.239958][T20641] vm_mmap_pgoff+0x1a2/0x3b0 [ 1994.241981][T20641] ? randomize_page+0xb0/0xb0 [ 1994.244009][T20641] ksys_mmap_pgoff+0x41f/0x5a0 [ 1994.246079][T20641] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1994.248349][T20641] __do_fast_syscall_32+0x65/0xf0 [ 1994.250557][T20641] do_fast_syscall_32+0x33/0x70 [ 1994.252692][T20641] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1994.255442][T20641] RIP: 0023:0xf7fb1579 [ 1994.257074][T20641] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1994.264075][T20641] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1994.267571][T20641] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1994.270880][T20641] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1994.274224][T20641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1994.277545][T20641] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1994.280847][T20641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1994.284239][T20641] 23:13:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x2) 23:13:33 executing program 2: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x80000000) 23:13:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 3) 23:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 1) [ 1994.318554][T20662] FAULT_INJECTION: forcing a failure. 23:13:33 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 1994.318554][T20662] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.318686][T20660] FAULT_INJECTION: forcing a failure. [ 1994.318686][T20660] name failslab, interval 1, probability 0, space 0, times 0 23:13:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x2) [ 1994.324436][T20662] CPU: 3 PID: 20662 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1994.324462][T20662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1994.324473][T20662] Call Trace: [ 1994.324480][T20662] 23:13:33 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 1994.324489][T20662] dump_stack_lvl+0x136/0x150 [ 1994.324524][T20662] should_fail_ex+0x4a3/0x5b0 [ 1994.345937][T20662] should_failslab+0x9/0x20 [ 1994.348058][T20662] kmem_cache_alloc+0x63/0x3b0 [ 1994.350292][T20662] vm_area_dup+0x23/0x300 [ 1994.352295][T20662] __split_vma+0x199/0x830 23:13:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x2) [ 1994.354370][T20662] ? expand_stack+0x20/0x20 [ 1994.356622][T20662] ? find_held_lock+0x2d/0x110 [ 1994.358832][T20662] do_vmi_align_munmap+0x2bc/0x1580 [ 1994.361215][T20662] ? __split_vma+0x830/0x830 [ 1994.363364][T20662] ? mtree_range_walk+0x63e/0x940 23:13:33 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 1994.365490][T20662] do_vmi_munmap+0x26e/0x2c0 [ 1994.367450][T20662] mmap_region+0x1f0/0x28d0 [ 1994.369294][T20662] ? arch_get_unmapped_area+0x560/0x560 [ 1994.371804][T20662] ? validate_mm+0x1d4/0x290 [ 1994.373960][T20662] ? do_munmap+0xf0/0xf0 [ 1994.375921][T20662] ? security_mmap_addr+0x77/0xa0 [ 1994.378248][T20662] ? get_unmapped_area+0x1e8/0x3c0 [ 1994.380613][T20662] do_mmap+0x831/0xf60 [ 1994.382519][T20662] vm_mmap_pgoff+0x1a2/0x3b0 [ 1994.384558][T20662] ? randomize_page+0xb0/0xb0 [ 1994.386671][T20662] ksys_mmap_pgoff+0x41f/0x5a0 [ 1994.388811][T20662] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1994.391289][T20662] __do_fast_syscall_32+0x65/0xf0 [ 1994.393911][T20662] do_fast_syscall_32+0x33/0x70 [ 1994.396076][T20662] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1994.398950][T20662] RIP: 0023:0xf7f29579 [ 1994.400461][T20662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1994.408005][T20662] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1994.411310][T20662] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1994.414506][T20662] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1994.417541][T20662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1994.420699][T20662] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1994.423515][T20662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1994.426563][T20662] [ 1994.427806][T20660] CPU: 0 PID: 20660 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1994.432350][T20660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1994.436035][T20660] Call Trace: [ 1994.437732][T20660] [ 1994.439094][T20660] dump_stack_lvl+0x136/0x150 [ 1994.441078][T20660] should_fail_ex+0x4a3/0x5b0 [ 1994.443038][T20660] should_failslab+0x9/0x20 [ 1994.444963][T20660] kmem_cache_alloc+0x63/0x3b0 [ 1994.447079][T20660] mas_alloc_nodes+0x4dd/0x880 [ 1994.448782][T20660] mas_preallocate+0x1bb/0x360 [ 1994.450672][T20660] __split_vma+0x1b7/0x830 [ 1994.452558][T20660] ? expand_stack+0x20/0x20 [ 1994.454465][T20660] ? find_held_lock+0x2d/0x110 [ 1994.456504][T20660] do_vmi_align_munmap+0x2bc/0x1580 [ 1994.458870][T20660] ? __split_vma+0x830/0x830 [ 1994.460546][T20660] ? mtree_range_walk+0x63e/0x940 [ 1994.462495][T20660] do_vmi_munmap+0x26e/0x2c0 [ 1994.464139][T20660] mmap_region+0x1f0/0x28d0 [ 1994.465862][T20660] ? arch_get_unmapped_area+0x560/0x560 [ 1994.468372][T20660] ? validate_mm+0x1d4/0x290 [ 1994.470119][T20660] ? do_munmap+0xf0/0xf0 [ 1994.471573][T20660] ? security_mmap_addr+0x77/0xa0 [ 1994.473381][T20660] ? get_unmapped_area+0x1e8/0x3c0 [ 1994.475298][T20660] do_mmap+0x831/0xf60 [ 1994.476837][T20660] vm_mmap_pgoff+0x1a2/0x3b0 [ 1994.478483][T20660] ? randomize_page+0xb0/0xb0 [ 1994.480247][T20660] ksys_mmap_pgoff+0x41f/0x5a0 [ 1994.482094][T20660] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1994.484043][T20660] __do_fast_syscall_32+0x65/0xf0 [ 1994.486037][T20660] do_fast_syscall_32+0x33/0x70 [ 1994.488103][T20660] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1994.490354][T20660] RIP: 0023:0xf7fb1579 [ 1994.491829][T20660] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1994.499682][T20660] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1994.502583][T20660] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1994.505419][T20660] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1994.508863][T20660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1994.512238][T20660] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1994.515819][T20660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1994.519390][T20660] [ 1994.520957][ C0] vkms_vblank_simulate: vblank timer overrun 23:13:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 4) 23:13:34 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 23:13:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 2) 23:13:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) [ 1994.544450][T20679] FAULT_INJECTION: forcing a failure. [ 1994.544450][T20679] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.549121][T20679] CPU: 2 PID: 20679 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1994.550213][T20681] FAULT_INJECTION: forcing a failure. [ 1994.550213][T20681] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.552668][T20679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1994.552677][T20679] Call Trace: [ 1994.552681][T20679] 23:13:34 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 1994.552687][T20679] dump_stack_lvl+0x136/0x150 [ 1994.552708][T20679] should_fail_ex+0x4a3/0x5b0 [ 1994.552725][T20679] should_failslab+0x9/0x20 [ 1994.567410][T20679] kmem_cache_alloc+0x63/0x3b0 [ 1994.569078][T20679] vm_area_dup+0x55/0x300 [ 1994.570621][T20679] __split_vma+0x199/0x830 [ 1994.572252][T20679] ? expand_stack+0x20/0x20 [ 1994.574106][T20679] ? find_held_lock+0x2d/0x110 [ 1994.575997][T20679] do_vmi_align_munmap+0x2bc/0x1580 [ 1994.578084][T20679] ? __split_vma+0x830/0x830 [ 1994.579952][T20679] ? mtree_range_walk+0x63e/0x940 [ 1994.581975][T20679] do_vmi_munmap+0x26e/0x2c0 [ 1994.583830][T20679] mmap_region+0x1f0/0x28d0 [ 1994.585688][T20679] ? arch_get_unmapped_area+0x560/0x560 [ 1994.587755][T20679] ? validate_mm+0x1d4/0x290 [ 1994.589339][T20679] ? do_munmap+0xf0/0xf0 [ 1994.590793][T20679] ? security_mmap_addr+0x77/0xa0 [ 1994.592591][T20679] ? get_unmapped_area+0x1e8/0x3c0 23:13:34 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 23:13:34 executing program 2: mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 1994.594345][T20679] do_mmap+0x831/0xf60 [ 1994.596066][T20679] vm_mmap_pgoff+0x1a2/0x3b0 [ 1994.598322][T20679] ? randomize_page+0xb0/0xb0 [ 1994.600385][T20679] ksys_mmap_pgoff+0x41f/0x5a0 [ 1994.602109][T20679] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1994.604017][T20679] __do_fast_syscall_32+0x65/0xf0 [ 1994.606183][T20679] do_fast_syscall_32+0x33/0x70 [ 1994.608579][T20679] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1994.611361][T20679] RIP: 0023:0xf7f29579 [ 1994.612810][T20679] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1994.619746][T20679] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1994.623164][T20679] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1994.626308][T20679] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1994.629189][T20679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1994.632272][T20679] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1994.635599][T20679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1994.638737][T20679] 23:13:34 executing program 2: mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 1994.640065][T20681] CPU: 1 PID: 20681 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1994.644090][T20681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1994.647263][T20681] Call Trace: [ 1994.648474][T20681] [ 1994.649537][T20681] dump_stack_lvl+0x136/0x150 [ 1994.651225][T20681] should_fail_ex+0x4a3/0x5b0 [ 1994.652921][T20681] should_failslab+0x9/0x20 [ 1994.654570][T20681] kmem_cache_alloc_bulk+0x68/0x860 [ 1994.656434][T20681] ? kmem_cache_alloc+0x337/0x3b0 [ 1994.658218][T20681] mas_alloc_nodes+0x332/0x880 [ 1994.659917][T20681] mas_preallocate+0x1bb/0x360 [ 1994.661642][T20681] __split_vma+0x1b7/0x830 [ 1994.663253][T20681] ? expand_stack+0x20/0x20 [ 1994.664931][T20681] ? find_held_lock+0x2d/0x110 [ 1994.666697][T20681] do_vmi_align_munmap+0x2bc/0x1580 [ 1994.668787][T20681] ? __split_vma+0x830/0x830 [ 1994.670503][T20681] ? mtree_range_walk+0x63e/0x940 [ 1994.672304][T20681] do_vmi_munmap+0x26e/0x2c0 [ 1994.674215][T20681] mmap_region+0x1f0/0x28d0 [ 1994.676309][T20681] ? arch_get_unmapped_area+0x560/0x560 [ 1994.678844][T20681] ? validate_mm+0x1d4/0x290 [ 1994.681022][T20681] ? do_munmap+0xf0/0xf0 [ 1994.683004][T20681] ? security_mmap_addr+0x77/0xa0 [ 1994.685267][T20681] ? get_unmapped_area+0x1e8/0x3c0 [ 1994.687695][T20681] do_mmap+0x831/0xf60 [ 1994.689593][T20681] vm_mmap_pgoff+0x1a2/0x3b0 [ 1994.691700][T20681] ? randomize_page+0xb0/0xb0 [ 1994.693823][T20681] ksys_mmap_pgoff+0x41f/0x5a0 [ 1994.696079][T20681] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1994.698683][T20681] __do_fast_syscall_32+0x65/0xf0 [ 1994.701017][T20681] do_fast_syscall_32+0x33/0x70 [ 1994.703022][T20681] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1994.705741][T20681] RIP: 0023:0xf7fb1579 [ 1994.707575][T20681] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1994.716165][T20681] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1994.719907][T20681] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1994.723459][T20681] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1994.726952][T20681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1994.730194][T20681] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1994.733770][T20681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1994.737023][T20681] 23:13:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 5) 23:13:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 3) 23:13:34 executing program 2: mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 23:13:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) [ 1994.755026][T20692] FAULT_INJECTION: forcing a failure. 23:13:34 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) [ 1994.755026][T20692] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.760281][T20692] CPU: 1 PID: 20692 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1994.764604][T20692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:13:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 6) [ 1994.767866][T20692] Call Trace: [ 1994.769154][T20692] 23:13:34 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) [ 1994.770380][T20692] dump_stack_lvl+0x136/0x150 [ 1994.772257][T20692] should_fail_ex+0x4a3/0x5b0 [ 1994.774209][T20692] should_failslab+0x9/0x20 [ 1994.775995][T20692] kmem_cache_alloc+0x63/0x3b0 [ 1994.778038][T20692] mas_alloc_nodes+0x4dd/0x880 [ 1994.778758][T20701] FAULT_INJECTION: forcing a failure. [ 1994.778758][T20701] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.779777][T20692] mas_preallocate+0x1bb/0x360 23:13:34 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) [ 1994.786171][T20692] __split_vma+0x1b7/0x830 [ 1994.788377][T20692] ? expand_stack+0x20/0x20 [ 1994.790100][T20692] ? find_held_lock+0x2d/0x110 [ 1994.791904][T20692] do_vmi_align_munmap+0x2bc/0x1580 [ 1994.793756][T20692] ? __split_vma+0x830/0x830 [ 1994.795412][T20692] ? mtree_range_walk+0x63e/0x940 [ 1994.797230][T20692] do_vmi_munmap+0x26e/0x2c0 [ 1994.798870][T20692] mmap_region+0x1f0/0x28d0 [ 1994.800502][T20692] ? arch_get_unmapped_area+0x560/0x560 [ 1994.802706][T20692] ? validate_mm+0x1d4/0x290 [ 1994.804786][T20692] ? do_munmap+0xf0/0xf0 [ 1994.806443][T20692] ? security_mmap_addr+0x77/0xa0 23:13:34 executing program 2: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 1994.808484][T20692] ? get_unmapped_area+0x1e8/0x3c0 [ 1994.810450][T20692] do_mmap+0x831/0xf60 [ 1994.811930][T20692] vm_mmap_pgoff+0x1a2/0x3b0 [ 1994.813583][T20692] ? randomize_page+0xb0/0xb0 [ 1994.815282][T20692] ksys_mmap_pgoff+0x41f/0x5a0 [ 1994.817016][T20692] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1994.818921][T20692] __do_fast_syscall_32+0x65/0xf0 [ 1994.820735][T20692] do_fast_syscall_32+0x33/0x70 [ 1994.822895][T20692] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1994.825664][T20692] RIP: 0023:0xf7f29579 [ 1994.827487][T20692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1994.835714][T20692] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1994.839355][T20692] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1994.842810][T20692] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1994.846248][T20692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1994.849676][T20692] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1994.853135][T20692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1994.856578][T20692] [ 1994.857936][T20701] CPU: 0 PID: 20701 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1994.861883][T20701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1994.865042][T20701] Call Trace: [ 1994.866352][T20701] [ 1994.867616][T20701] dump_stack_lvl+0x136/0x150 23:13:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 4) 23:13:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) 23:13:34 executing program 2: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 1994.869653][T20701] should_fail_ex+0x4a3/0x5b0 [ 1994.872644][T20701] should_failslab+0x9/0x20 [ 1994.874376][T20701] kmem_cache_alloc+0x63/0x3b0 [ 1994.876157][T20701] vm_area_dup+0x23/0x300 [ 1994.877746][T20701] __split_vma+0x199/0x830 [ 1994.879379][T20701] ? expand_stack+0x20/0x20 [ 1994.881077][T20701] do_vmi_align_munmap+0x400/0x1580 [ 1994.881758][T20712] FAULT_INJECTION: forcing a failure. 23:13:34 executing program 2: socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 1994.881758][T20712] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.882923][T20701] ? __split_vma+0x830/0x830 [ 1994.882942][T20701] ? mtree_range_walk+0x63e/0x940 [ 1994.882966][T20701] do_vmi_munmap+0x26e/0x2c0 [ 1994.894311][T20701] mmap_region+0x1f0/0x28d0 [ 1994.896119][T20701] ? arch_get_unmapped_area+0x560/0x560 [ 1994.898101][T20701] ? validate_mm+0x1d4/0x290 [ 1994.899751][T20701] ? do_munmap+0xf0/0xf0 [ 1994.901461][T20701] ? security_mmap_addr+0x77/0xa0 [ 1994.903515][T20701] ? get_unmapped_area+0x1e8/0x3c0 [ 1994.905671][T20701] do_mmap+0x831/0xf60 [ 1994.907554][T20701] vm_mmap_pgoff+0x1a2/0x3b0 [ 1994.909449][T20701] ? randomize_page+0xb0/0xb0 [ 1994.911470][T20701] ksys_mmap_pgoff+0x41f/0x5a0 [ 1994.913487][T20701] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1994.915691][T20701] __do_fast_syscall_32+0x65/0xf0 [ 1994.918029][T20701] do_fast_syscall_32+0x33/0x70 [ 1994.920268][T20701] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1994.923158][T20701] RIP: 0023:0xf7fb1579 [ 1994.925005][T20701] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1994.933206][T20701] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1994.936601][T20701] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1994.940074][T20701] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1994.943707][T20701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1994.947344][T20701] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1994.950942][T20701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1994.954503][T20701] [ 1994.955934][T20712] CPU: 1 PID: 20712 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1994.956095][ C0] vkms_vblank_simulate: vblank timer overrun [ 1994.959745][T20712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1994.959754][T20712] Call Trace: [ 1994.967059][T20712] [ 1994.968102][T20712] dump_stack_lvl+0x136/0x150 [ 1994.969789][T20712] should_fail_ex+0x4a3/0x5b0 [ 1994.971462][T20712] should_failslab+0x9/0x20 [ 1994.973072][T20712] kmem_cache_alloc_bulk+0x68/0x860 23:13:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 7) 23:13:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) 23:13:34 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (fail_nth: 1) [ 1994.974942][T20712] ? kmem_cache_alloc+0x337/0x3b0 [ 1994.977148][T20712] mas_alloc_nodes+0x332/0x880 [ 1994.979438][T20712] mas_preallocate+0x1bb/0x360 [ 1994.981485][T20712] __split_vma+0x1b7/0x830 [ 1994.983630][T20712] ? expand_stack+0x20/0x20 [ 1994.985818][T20712] ? find_held_lock+0x2d/0x110 [ 1994.988056][T20712] do_vmi_align_munmap+0x2bc/0x1580 [ 1994.990451][T20712] ? __split_vma+0x830/0x830 [ 1994.992612][T20712] ? mtree_range_walk+0x63e/0x940 [ 1994.993127][T20717] FAULT_INJECTION: forcing a failure. [ 1994.993127][T20717] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.994981][T20712] do_vmi_munmap+0x26e/0x2c0 [ 1994.995014][T20712] mmap_region+0x1f0/0x28d0 [ 1994.995040][T20712] ? arch_get_unmapped_area+0x560/0x560 [ 1995.005801][T20712] ? validate_mm+0x1d4/0x290 [ 1995.007345][T20712] ? do_munmap+0xf0/0xf0 [ 1995.008862][T20712] ? security_mmap_addr+0x77/0xa0 [ 1995.009462][T20721] FAULT_INJECTION: forcing a failure. [ 1995.009462][T20721] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.010643][T20712] ? get_unmapped_area+0x1e8/0x3c0 [ 1995.010660][T20712] do_mmap+0x831/0xf60 [ 1995.010676][T20712] vm_mmap_pgoff+0x1a2/0x3b0 [ 1995.010693][T20712] ? randomize_page+0xb0/0xb0 [ 1995.010712][T20712] ksys_mmap_pgoff+0x41f/0x5a0 [ 1995.025553][T20712] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1995.027761][T20712] __do_fast_syscall_32+0x65/0xf0 [ 1995.029777][T20712] do_fast_syscall_32+0x33/0x70 [ 1995.031662][T20712] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1995.033980][T20712] RIP: 0023:0xf7f29579 23:13:34 executing program 3: [ 1995.035366][T20712] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.043809][T20712] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1995.047045][T20712] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1995.050382][T20712] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1995.053874][T20712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.057335][T20712] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1995.060947][T20712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.064485][T20712] [ 1995.065928][T20717] CPU: 0 PID: 20717 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1995.070618][T20717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1995.074636][T20717] Call Trace: [ 1995.076126][T20717] [ 1995.077475][T20717] dump_stack_lvl+0x136/0x150 [ 1995.079619][T20717] should_fail_ex+0x4a3/0x5b0 [ 1995.081747][T20717] should_failslab+0x9/0x20 23:13:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 5) 23:13:34 executing program 3: [ 1995.083499][T20717] kmem_cache_alloc+0x63/0x3b0 [ 1995.085438][T20717] vm_area_dup+0x23/0x300 [ 1995.086981][T20717] __split_vma+0x199/0x830 [ 1995.088590][T20717] ? expand_stack+0x20/0x20 [ 1995.090238][T20717] ? find_held_lock+0x2d/0x110 [ 1995.091941][T20717] do_vmi_align_munmap+0x2bc/0x1580 [ 1995.093812][T20717] ? __split_vma+0x830/0x830 [ 1995.095461][T20717] ? mtree_range_walk+0x63e/0x940 [ 1995.097219][T20717] do_vmi_munmap+0x26e/0x2c0 [ 1995.098871][T20717] mmap_region+0x1f0/0x28d0 [ 1995.100516][T20717] ? arch_get_unmapped_area+0x560/0x560 [ 1995.102478][T20717] ? validate_mm+0x1d4/0x290 [ 1995.104118][T20717] ? do_munmap+0xf0/0xf0 [ 1995.105642][T20717] ? security_mmap_addr+0x77/0xa0 [ 1995.107423][T20717] ? get_unmapped_area+0x1e8/0x3c0 [ 1995.109230][T20717] do_mmap+0x831/0xf60 [ 1995.110672][T20717] vm_mmap_pgoff+0x1a2/0x3b0 [ 1995.112342][T20717] ? randomize_page+0xb0/0xb0 [ 1995.114073][T20717] ksys_mmap_pgoff+0x41f/0x5a0 [ 1995.115790][T20717] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1995.117730][T20717] __do_fast_syscall_32+0x65/0xf0 [ 1995.119679][T20717] do_fast_syscall_32+0x33/0x70 [ 1995.121951][T20717] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1995.124481][T20717] RIP: 0023:0xf7f17579 23:13:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 6) [ 1995.126132][T20717] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.133326][T20717] RSP: 002b:00000000f7f125cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1995.136439][T20717] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 0000000000002000 [ 1995.139052][T20727] FAULT_INJECTION: forcing a failure. [ 1995.139052][T20727] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.139305][T20717] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 1995.139315][T20717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.150561][T20717] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1995.153388][T20717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.156222][T20717] [ 1995.157345][T20721] CPU: 1 PID: 20721 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 23:13:34 executing program 3: [ 1995.157470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1995.161980][T20721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1995.168678][T20721] Call Trace: [ 1995.170243][T20721] [ 1995.171570][T20721] dump_stack_lvl+0x136/0x150 [ 1995.173721][T20721] should_fail_ex+0x4a3/0x5b0 [ 1995.175789][T20721] should_failslab+0x9/0x20 [ 1995.177829][T20721] kmem_cache_alloc+0x63/0x3b0 [ 1995.179981][T20721] vm_area_dup+0x55/0x300 [ 1995.181962][T20721] __split_vma+0x199/0x830 [ 1995.184005][T20721] ? expand_stack+0x20/0x20 [ 1995.186056][T20721] do_vmi_align_munmap+0x400/0x1580 [ 1995.188384][T20721] ? __split_vma+0x830/0x830 [ 1995.190473][T20721] ? mtree_range_walk+0x63e/0x940 [ 1995.192737][T20721] do_vmi_munmap+0x26e/0x2c0 [ 1995.194792][T20721] mmap_region+0x1f0/0x28d0 [ 1995.196841][T20721] ? arch_get_unmapped_area+0x560/0x560 [ 1995.199269][T20721] ? validate_mm+0x1d4/0x290 [ 1995.201371][T20721] ? do_munmap+0xf0/0xf0 [ 1995.203202][T20721] ? security_mmap_addr+0x77/0xa0 [ 1995.205426][T20721] ? get_unmapped_area+0x1e8/0x3c0 [ 1995.207733][T20721] do_mmap+0x831/0xf60 [ 1995.209522][T20721] vm_mmap_pgoff+0x1a2/0x3b0 [ 1995.211605][T20721] ? randomize_page+0xb0/0xb0 [ 1995.213659][T20721] ksys_mmap_pgoff+0x41f/0x5a0 [ 1995.215806][T20721] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1995.218231][T20721] __do_fast_syscall_32+0x65/0xf0 [ 1995.220531][T20721] do_fast_syscall_32+0x33/0x70 [ 1995.222749][T20721] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1995.225622][T20721] RIP: 0023:0xf7fb1579 [ 1995.227524][T20721] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.236103][T20721] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1995.239811][T20721] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1995.243221][T20721] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1995.246643][T20721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.250125][T20721] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1995.253596][T20721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.257067][T20721] [ 1995.258454][T20727] CPU: 0 PID: 20727 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1995.263018][T20727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1995.266890][T20727] Call Trace: [ 1995.268365][T20727] [ 1995.269674][T20727] dump_stack_lvl+0x136/0x150 [ 1995.271770][T20727] should_fail_ex+0x4a3/0x5b0 [ 1995.273833][T20727] should_failslab+0x9/0x20 [ 1995.275859][T20727] kmem_cache_alloc+0x63/0x3b0 [ 1995.277995][T20727] vm_area_dup+0x23/0x300 [ 1995.279801][T20727] __split_vma+0x199/0x830 [ 1995.281813][T20727] ? expand_stack+0x20/0x20 [ 1995.283756][T20727] do_vmi_align_munmap+0x400/0x1580 [ 1995.286004][T20727] ? __split_vma+0x830/0x830 [ 1995.288016][T20727] ? mtree_range_walk+0x63e/0x940 [ 1995.289889][T20727] do_vmi_munmap+0x26e/0x2c0 [ 1995.291540][T20727] mmap_region+0x1f0/0x28d0 [ 1995.293167][T20727] ? arch_get_unmapped_area+0x560/0x560 [ 1995.295191][T20727] ? validate_mm+0x1d4/0x290 [ 1995.296987][T20727] ? do_munmap+0xf0/0xf0 [ 1995.298729][T20727] ? security_mmap_addr+0x77/0xa0 [ 1995.300564][T20727] ? get_unmapped_area+0x1e8/0x3c0 [ 1995.302449][T20727] do_mmap+0x831/0xf60 [ 1995.303984][T20727] vm_mmap_pgoff+0x1a2/0x3b0 [ 1995.305924][T20727] ? randomize_page+0xb0/0xb0 [ 1995.307776][T20727] ksys_mmap_pgoff+0x41f/0x5a0 [ 1995.309613][T20727] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1995.311863][T20727] __do_fast_syscall_32+0x65/0xf0 [ 1995.313695][T20727] do_fast_syscall_32+0x33/0x70 [ 1995.315623][T20727] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1995.318471][T20727] RIP: 0023:0xf7f29579 [ 1995.320312][T20727] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.328474][T20727] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1995.331897][T20727] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1995.335449][T20727] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1995.338871][T20727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.342088][T20727] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1995.345459][T20727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.348324][T20727] 23:13:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 8) 23:13:34 executing program 3: syz_open_dev$usbfs(0x0, 0xfae, 0x0) 23:13:34 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (fail_nth: 2) [ 1995.349816][ C0] vkms_vblank_simulate: vblank timer overrun [ 1995.360738][T20731] FAULT_INJECTION: forcing a failure. 23:13:34 executing program 3: syz_open_dev$usbfs(0x0, 0xfae, 0x0) [ 1995.360738][T20731] name failslab, interval 1, probability 0, space 0, times 0 23:13:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 7) [ 1995.370809][T20731] CPU: 1 PID: 20731 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1995.374804][T20734] FAULT_INJECTION: forcing a failure. [ 1995.374804][T20734] name failslab, interval 1, probability 0, space 0, times 0 23:13:34 executing program 3: syz_open_dev$usbfs(0x0, 0xfae, 0x0) [ 1995.375641][T20731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1995.377326][T20737] FAULT_INJECTION: forcing a failure. [ 1995.377326][T20737] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.390897][T20731] Call Trace: [ 1995.392481][T20731] [ 1995.393864][T20731] dump_stack_lvl+0x136/0x150 [ 1995.396093][T20731] should_fail_ex+0x4a3/0x5b0 23:13:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0) [ 1995.398177][T20731] should_failslab+0x9/0x20 [ 1995.400470][T20731] kmem_cache_alloc+0x63/0x3b0 [ 1995.402728][T20731] vm_area_dup+0x55/0x300 [ 1995.404764][T20731] __split_vma+0x199/0x830 [ 1995.406856][T20731] ? expand_stack+0x20/0x20 [ 1995.408991][T20731] ? find_held_lock+0x2d/0x110 23:13:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0) [ 1995.411229][T20731] do_vmi_align_munmap+0x2bc/0x1580 [ 1995.413776][T20731] ? __split_vma+0x830/0x830 [ 1995.415919][T20731] ? mtree_range_walk+0x63e/0x940 [ 1995.418273][T20731] do_vmi_munmap+0x26e/0x2c0 [ 1995.420470][T20731] mmap_region+0x1f0/0x28d0 [ 1995.422584][T20731] ? arch_get_unmapped_area+0x560/0x560 [ 1995.425224][T20731] ? validate_mm+0x1d4/0x290 [ 1995.427397][T20731] ? do_munmap+0xf0/0xf0 [ 1995.429404][T20731] ? security_mmap_addr+0x77/0xa0 [ 1995.431736][T20731] ? get_unmapped_area+0x1e8/0x3c0 [ 1995.434127][T20731] do_mmap+0x831/0xf60 [ 1995.436023][T20731] vm_mmap_pgoff+0x1a2/0x3b0 [ 1995.438190][T20731] ? randomize_page+0xb0/0xb0 [ 1995.440378][T20731] ksys_mmap_pgoff+0x41f/0x5a0 [ 1995.442600][T20731] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1995.445045][T20731] __do_fast_syscall_32+0x65/0xf0 [ 1995.447375][T20731] do_fast_syscall_32+0x33/0x70 [ 1995.449655][T20731] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1995.452568][T20731] RIP: 0023:0xf7f17579 [ 1995.454459][T20731] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.463192][T20731] RSP: 002b:00000000f7f125cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1995.467013][T20731] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 0000000000002000 [ 1995.470626][T20731] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 1995.474263][T20731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.477800][T20731] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1995.481423][T20731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.485042][T20731] [ 1995.486476][T20737] CPU: 2 PID: 20737 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1995.490573][T20737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1995.493763][T20737] Call Trace: [ 1995.494967][T20737] [ 1995.496055][T20737] dump_stack_lvl+0x136/0x150 [ 1995.497692][T20737] should_fail_ex+0x4a3/0x5b0 [ 1995.499458][T20737] should_failslab+0x9/0x20 [ 1995.501201][T20737] kmem_cache_alloc+0x63/0x3b0 [ 1995.503240][T20737] vm_area_dup+0x55/0x300 [ 1995.505153][T20737] __split_vma+0x199/0x830 [ 1995.507181][T20737] ? expand_stack+0x20/0x20 [ 1995.509144][T20737] do_vmi_align_munmap+0x400/0x1580 [ 1995.511424][T20737] ? __split_vma+0x830/0x830 [ 1995.513520][T20737] ? mtree_range_walk+0x63e/0x940 [ 1995.515842][T20737] do_vmi_munmap+0x26e/0x2c0 [ 1995.517914][T20737] mmap_region+0x1f0/0x28d0 [ 1995.519962][T20737] ? arch_get_unmapped_area+0x560/0x560 [ 1995.522402][T20737] ? validate_mm+0x1d4/0x290 [ 1995.524448][T20737] ? do_munmap+0xf0/0xf0 [ 1995.526175][T20737] ? security_mmap_addr+0x77/0xa0 [ 1995.528379][T20737] ? get_unmapped_area+0x1e8/0x3c0 [ 1995.530947][T20737] do_mmap+0x831/0xf60 [ 1995.532760][T20737] vm_mmap_pgoff+0x1a2/0x3b0 [ 1995.534958][T20737] ? randomize_page+0xb0/0xb0 [ 1995.536954][T20737] ksys_mmap_pgoff+0x41f/0x5a0 [ 1995.539092][T20737] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1995.541001][T20737] __do_fast_syscall_32+0x65/0xf0 [ 1995.543212][T20737] do_fast_syscall_32+0x33/0x70 [ 1995.545316][T20737] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1995.548003][T20737] RIP: 0023:0xf7f29579 [ 1995.549757][T20737] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.557889][T20737] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1995.561272][T20737] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1995.564260][T20737] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1995.567005][T20737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.569778][T20737] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1995.572688][T20737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.575976][T20737] [ 1995.577475][T20734] CPU: 1 PID: 20734 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1995.581390][T20734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1995.585316][T20734] Call Trace: [ 1995.586577][T20734] [ 1995.587678][T20734] dump_stack_lvl+0x136/0x150 [ 1995.589434][T20734] should_fail_ex+0x4a3/0x5b0 [ 1995.591192][T20734] should_failslab+0x9/0x20 [ 1995.593025][T20734] kmem_cache_alloc+0x63/0x3b0 [ 1995.594846][T20734] mas_alloc_nodes+0x4dd/0x880 [ 1995.596706][T20734] mas_preallocate+0x1bb/0x360 [ 1995.598478][T20734] __split_vma+0x1b7/0x830 [ 1995.600178][T20734] ? expand_stack+0x20/0x20 [ 1995.601915][T20734] do_vmi_align_munmap+0x400/0x1580 [ 1995.603950][T20734] ? __split_vma+0x830/0x830 [ 1995.605688][T20734] ? mtree_range_walk+0x63e/0x940 [ 1995.607559][T20734] do_vmi_munmap+0x26e/0x2c0 [ 1995.609283][T20734] mmap_region+0x1f0/0x28d0 [ 1995.610966][T20734] ? arch_get_unmapped_area+0x560/0x560 [ 1995.613300][T20734] ? validate_mm+0x1d4/0x290 [ 1995.615009][T20734] ? do_munmap+0xf0/0xf0 [ 1995.616607][T20734] ? security_mmap_addr+0x77/0xa0 [ 1995.618463][T20734] ? get_unmapped_area+0x1e8/0x3c0 [ 1995.620365][T20734] do_mmap+0x831/0xf60 [ 1995.621889][T20734] vm_mmap_pgoff+0x1a2/0x3b0 [ 1995.623593][T20734] ? randomize_page+0xb0/0xb0 [ 1995.625350][T20734] ksys_mmap_pgoff+0x41f/0x5a0 [ 1995.627138][T20734] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1995.629096][T20734] __do_fast_syscall_32+0x65/0xf0 [ 1995.630967][T20734] do_fast_syscall_32+0x33/0x70 [ 1995.632806][T20734] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1995.635274][T20734] RIP: 0023:0xf7fb1579 [ 1995.637135][T20734] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.644562][T20734] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1995.647505][T20734] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1995.650314][T20734] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1995.653152][T20734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.656296][T20734] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1995.660004][T20734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.663292][T20734] 23:13:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 9) 23:13:35 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0) 23:13:35 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (fail_nth: 3) 23:13:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 8) [ 1995.683717][T20748] FAULT_INJECTION: forcing a failure. [ 1995.683717][T20748] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.686043][T20749] FAULT_INJECTION: forcing a failure. [ 1995.686043][T20749] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.689834][T20748] CPU: 3 PID: 20748 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1995.691696][T20752] FAULT_INJECTION: forcing a failure. [ 1995.691696][T20752] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.702796][T20748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1995.706432][T20748] Call Trace: [ 1995.707830][T20748] [ 1995.709059][T20748] dump_stack_lvl+0x136/0x150 [ 1995.710927][T20748] should_fail_ex+0x4a3/0x5b0 [ 1995.712821][T20748] should_failslab+0x9/0x20 [ 1995.714675][T20748] kmem_cache_alloc+0x63/0x3b0 [ 1995.716705][T20748] mas_alloc_nodes+0x4dd/0x880 [ 1995.718698][T20748] mas_preallocate+0x1bb/0x360 [ 1995.720668][T20748] __split_vma+0x1b7/0x830 [ 1995.722430][T20748] ? expand_stack+0x20/0x20 [ 1995.724089][T20748] ? find_held_lock+0x2d/0x110 [ 1995.725778][T20748] do_vmi_align_munmap+0x2bc/0x1580 [ 1995.727588][T20748] ? __split_vma+0x830/0x830 [ 1995.729213][T20748] ? mtree_range_walk+0x63e/0x940 [ 1995.731015][T20748] do_vmi_munmap+0x26e/0x2c0 [ 1995.732826][T20748] mmap_region+0x1f0/0x28d0 [ 1995.734701][T20748] ? arch_get_unmapped_area+0x560/0x560 [ 1995.737144][T20748] ? validate_mm+0x1d4/0x290 [ 1995.738713][T20748] ? do_munmap+0xf0/0xf0 [ 1995.740226][T20748] ? security_mmap_addr+0x77/0xa0 [ 1995.742087][T20748] ? get_unmapped_area+0x1e8/0x3c0 [ 1995.744099][T20748] do_mmap+0x831/0xf60 [ 1995.745524][T20748] vm_mmap_pgoff+0x1a2/0x3b0 [ 1995.747166][T20748] ? randomize_page+0xb0/0xb0 [ 1995.748813][T20748] ksys_mmap_pgoff+0x41f/0x5a0 [ 1995.750498][T20748] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1995.752338][T20748] __do_fast_syscall_32+0x65/0xf0 [ 1995.754221][T20748] do_fast_syscall_32+0x33/0x70 [ 1995.755999][T20748] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1995.758477][T20748] RIP: 0023:0xf7f17579 [ 1995.760077][T20748] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.767008][T20748] RSP: 002b:00000000f7f125cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1995.769888][T20748] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 0000000000002000 [ 1995.772592][T20748] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 1995.775536][T20748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.778392][T20748] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1995.781194][T20748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.784143][T20748] [ 1995.785205][T20752] CPU: 0 PID: 20752 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1995.790003][T20752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1995.794114][T20752] Call Trace: [ 1995.795670][T20752] [ 1995.797052][T20752] dump_stack_lvl+0x136/0x150 [ 1995.799265][T20752] should_fail_ex+0x4a3/0x5b0 [ 1995.801474][T20752] should_failslab+0x9/0x20 [ 1995.803581][T20752] kmem_cache_alloc_bulk+0x68/0x860 [ 1995.806013][T20752] ? kmem_cache_alloc+0x337/0x3b0 [ 1995.808366][T20752] mas_alloc_nodes+0x332/0x880 [ 1995.810599][T20752] mas_preallocate+0x1bb/0x360 [ 1995.812841][T20752] __split_vma+0x1b7/0x830 [ 1995.814947][T20752] ? expand_stack+0x20/0x20 [ 1995.817091][T20752] do_vmi_align_munmap+0x400/0x1580 [ 1995.819535][T20752] ? __split_vma+0x830/0x830 [ 1995.821693][T20752] ? mtree_range_walk+0x63e/0x940 [ 1995.824063][T20752] do_vmi_munmap+0x26e/0x2c0 [ 1995.826224][T20752] mmap_region+0x1f0/0x28d0 [ 1995.828336][T20752] ? arch_get_unmapped_area+0x560/0x560 [ 1995.830884][T20752] ? validate_mm+0x1d4/0x290 [ 1995.833056][T20752] ? do_munmap+0xf0/0xf0 [ 1995.835040][T20752] ? security_mmap_addr+0x77/0xa0 [ 1995.837386][T20752] ? get_unmapped_area+0x1e8/0x3c0 [ 1995.839748][T20752] do_mmap+0x831/0xf60 [ 1995.841662][T20752] vm_mmap_pgoff+0x1a2/0x3b0 [ 1995.843705][T20754] FAULT_INJECTION: forcing a failure. [ 1995.843705][T20754] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.843812][T20752] ? randomize_page+0xb0/0xb0 [ 1995.850460][T20752] ksys_mmap_pgoff+0x41f/0x5a0 [ 1995.852678][T20752] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1995.855091][T20752] __do_fast_syscall_32+0x65/0xf0 [ 1995.857475][T20752] do_fast_syscall_32+0x33/0x70 [ 1995.859416][T20752] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1995.861699][T20752] RIP: 0023:0xf7fb1579 [ 1995.863514][T20752] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.872247][T20752] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1995.876036][T20752] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1995.879651][T20752] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1995.883291][T20752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.886871][T20752] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1995.890349][T20752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.893903][T20752] [ 1995.895284][T20754] CPU: 2 PID: 20754 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1995.895444][ C0] vkms_vblank_simulate: vblank timer overrun 23:13:35 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (fail_nth: 4) [ 1995.899465][T20754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1995.899476][T20754] Call Trace: [ 1995.907097][T20754] [ 1995.908248][T20754] dump_stack_lvl+0x136/0x150 [ 1995.910162][T20754] should_fail_ex+0x4a3/0x5b0 [ 1995.912059][T20754] should_failslab+0x9/0x20 [ 1995.914001][T20754] kmem_cache_alloc_bulk+0x68/0x860 [ 1995.915848][T20754] ? kmem_cache_alloc+0x337/0x3b0 [ 1995.917843][T20754] mas_alloc_nodes+0x332/0x880 [ 1995.919988][T20754] mas_preallocate+0x1bb/0x360 [ 1995.922175][T20754] __split_vma+0x1b7/0x830 [ 1995.924203][T20754] ? finish_task_switch.isra.0+0x2b5/0xc80 [ 1995.926832][T20754] ? expand_stack+0x20/0x20 [ 1995.928894][T20754] ? mark_lock.part.0+0xee/0x1970 [ 1995.931141][T20754] ? find_held_lock+0x2d/0x110 [ 1995.933314][T20754] ? print_usage_bug.part.0+0x660/0x660 [ 1995.935341][T20754] do_vmi_align_munmap+0x2bc/0x1580 [ 1995.937217][T20754] ? __split_vma+0x830/0x830 [ 1995.939072][T20754] ? mtree_range_walk+0x63e/0x940 [ 1995.940978][T20754] do_vmi_munmap+0x26e/0x2c0 [ 1995.942836][T20754] mmap_region+0x1f0/0x28d0 [ 1995.944641][T20754] ? arch_get_unmapped_area+0x560/0x560 [ 1995.946655][T20754] ? validate_mm+0x1d4/0x290 [ 1995.948583][T20754] ? do_munmap+0xf0/0xf0 [ 1995.950441][T20754] ? security_mmap_addr+0x77/0xa0 [ 1995.952616][T20754] ? get_unmapped_area+0x1e8/0x3c0 [ 1995.954821][T20754] do_mmap+0x831/0xf60 [ 1995.956681][T20754] vm_mmap_pgoff+0x1a2/0x3b0 [ 1995.958786][T20754] ? randomize_page+0xb0/0xb0 [ 1995.960971][T20754] ksys_mmap_pgoff+0x41f/0x5a0 [ 1995.963147][T20754] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1995.965576][T20754] __do_fast_syscall_32+0x65/0xf0 [ 1995.967832][T20754] do_fast_syscall_32+0x33/0x70 [ 1995.970079][T20754] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1995.972941][T20754] RIP: 0023:0xf7f17579 [ 1995.974799][T20754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1995.982930][T20754] RSP: 002b:00000000f7f125cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1995.986721][T20754] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 0000000000002000 [ 1995.990265][T20754] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 1995.993841][T20754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.997125][T20754] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1995.999545][T20754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.002373][T20754] [ 1996.003696][T20749] CPU: 0 PID: 20749 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1996.007551][T20749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:13:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 10) [ 1996.010732][T20749] Call Trace: [ 1996.012381][T20749] [ 1996.013841][T20749] dump_stack_lvl+0x136/0x150 [ 1996.015996][T20749] should_fail_ex+0x4a3/0x5b0 23:13:35 executing program 3: ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x1f) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004054) syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x4, 0x8, 0x1, 0x3}) [ 1996.017942][T20749] should_failslab+0x9/0x20 [ 1996.019836][T20749] kmem_cache_alloc+0x63/0x3b0 [ 1996.021703][T20749] mas_alloc_nodes+0x4dd/0x880 [ 1996.023522][T20749] mas_preallocate+0x1bb/0x360 [ 1996.025750][T20749] __split_vma+0x1b7/0x830 23:13:35 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (fail_nth: 5) [ 1996.027712][T20749] ? expand_stack+0x20/0x20 23:13:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 11) [ 1996.029922][T20749] do_vmi_align_munmap+0x400/0x1580 [ 1996.032369][T20749] ? __split_vma+0x830/0x830 [ 1996.034113][T20749] ? mtree_range_walk+0x63e/0x940 [ 1996.036251][T20749] do_vmi_munmap+0x26e/0x2c0 [ 1996.038335][T20749] mmap_region+0x1f0/0x28d0 [ 1996.040352][T20749] ? arch_get_unmapped_area+0x560/0x560 [ 1996.042888][T20749] ? validate_mm+0x1d4/0x290 [ 1996.044555][T20749] ? do_munmap+0xf0/0xf0 [ 1996.046476][T20749] ? security_mmap_addr+0x77/0xa0 [ 1996.048784][T20749] ? get_unmapped_area+0x1e8/0x3c0 [ 1996.049101][T20761] FAULT_INJECTION: forcing a failure. [ 1996.049101][T20761] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.051186][T20749] do_mmap+0x831/0xf60 [ 1996.051223][T20749] vm_mmap_pgoff+0x1a2/0x3b0 [ 1996.060724][T20749] ? randomize_page+0xb0/0xb0 23:13:35 executing program 3: ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x1f) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004054) syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x4, 0x8, 0x1, 0x3}) [ 1996.062879][T20749] ksys_mmap_pgoff+0x41f/0x5a0 [ 1996.065081][T20749] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1996.067472][T20749] __do_fast_syscall_32+0x65/0xf0 23:13:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 12) [ 1996.069584][T20749] do_fast_syscall_32+0x33/0x70 [ 1996.071802][T20749] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1996.074663][T20749] RIP: 0023:0xf7f29579 [ 1996.076450][T20749] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.083511][T20749] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1996.087083][T20749] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1996.088154][T20765] FAULT_INJECTION: forcing a failure. [ 1996.088154][T20765] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.090589][T20749] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1996.090603][T20749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 23:13:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 9) [ 1996.090614][T20749] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1996.090625][T20749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.090647][T20749] [ 1996.090668][T20761] CPU: 1 PID: 20761 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1996.090759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1996.118192][T20761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1996.122088][T20761] Call Trace: [ 1996.123546][T20761] [ 1996.124845][T20761] dump_stack_lvl+0x136/0x150 [ 1996.126893][T20761] should_fail_ex+0x4a3/0x5b0 [ 1996.128946][T20761] should_failslab+0x9/0x20 [ 1996.130917][T20761] kmem_cache_alloc+0x63/0x3b0 [ 1996.133009][T20761] vm_area_dup+0x23/0x300 [ 1996.134921][T20761] __split_vma+0x199/0x830 [ 1996.136958][T20761] ? expand_stack+0x20/0x20 [ 1996.138989][T20761] do_vmi_align_munmap+0x400/0x1580 23:13:35 executing program 3: ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x1f) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004054) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x80) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x4, 0x8, 0x1, 0x3}) [ 1996.141334][T20761] ? __split_vma+0x830/0x830 [ 1996.143516][T20761] ? mtree_range_walk+0x63e/0x940 [ 1996.145752][T20761] do_vmi_munmap+0x26e/0x2c0 [ 1996.147534][T20761] mmap_region+0x1f0/0x28d0 [ 1996.149461][T20761] ? arch_get_unmapped_area+0x560/0x560 [ 1996.151888][T20761] ? validate_mm+0x1d4/0x290 [ 1996.153812][T20761] ? do_munmap+0xf0/0xf0 [ 1996.155698][T20761] ? security_mmap_addr+0x77/0xa0 [ 1996.157916][T20761] ? get_unmapped_area+0x1e8/0x3c0 [ 1996.160181][T20761] do_mmap+0x831/0xf60 [ 1996.162007][T20761] vm_mmap_pgoff+0x1a2/0x3b0 [ 1996.163960][T20761] ? randomize_page+0xb0/0xb0 [ 1996.165973][T20761] ksys_mmap_pgoff+0x41f/0x5a0 [ 1996.168032][T20761] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1996.170349][T20761] __do_fast_syscall_32+0x65/0xf0 [ 1996.172566][T20761] do_fast_syscall_32+0x33/0x70 [ 1996.174732][T20761] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1996.177466][T20761] RIP: 0023:0xf7f17579 [ 1996.179257][T20761] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.187791][T20761] RSP: 002b:00000000f7f125cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1996.191447][T20761] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 0000000000002000 [ 1996.194765][T20761] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 1996.198174][T20761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.201682][T20761] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1996.205173][T20761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.208646][T20761] [ 1996.210029][T20765] CPU: 0 PID: 20765 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1996.213745][T20765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1996.216980][T20765] Call Trace: [ 1996.218265][T20765] [ 1996.219433][T20765] dump_stack_lvl+0x136/0x150 [ 1996.221412][T20765] should_fail_ex+0x4a3/0x5b0 [ 1996.223284][T20765] should_failslab+0x9/0x20 [ 1996.225152][T20765] kmem_cache_alloc+0x63/0x3b0 [ 1996.227043][T20765] ? mas_prev+0x168/0x720 [ 1996.228656][T20765] vm_area_alloc+0x20/0x230 [ 1996.230449][T20765] mmap_region+0x407/0x28d0 [ 1996.232173][T20765] ? validate_mm+0x1d4/0x290 [ 1996.234202][T20765] ? do_munmap+0xf0/0xf0 [ 1996.236022][T20765] ? security_mmap_addr+0x77/0xa0 [ 1996.237957][T20765] ? get_unmapped_area+0x1e8/0x3c0 [ 1996.239858][T20765] do_mmap+0x831/0xf60 [ 1996.241354][T20765] vm_mmap_pgoff+0x1a2/0x3b0 [ 1996.243040][T20765] ? randomize_page+0xb0/0xb0 [ 1996.244764][T20765] ksys_mmap_pgoff+0x41f/0x5a0 [ 1996.246582][T20765] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1996.248732][T20765] __do_fast_syscall_32+0x65/0xf0 [ 1996.250537][T20765] do_fast_syscall_32+0x33/0x70 [ 1996.252064][T20765] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1996.254424][T20765] RIP: 0023:0xf7fb1579 [ 1996.255919][T20765] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.263029][T20765] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1996.266214][T20765] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1996.269431][T20765] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1996.272503][T20765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.275813][T20765] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1996.278720][T20765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.281561][T20765] [ 1996.283107][ C0] vkms_vblank_simulate: vblank timer overrun [ 1996.292531][T20771] FAULT_INJECTION: forcing a failure. [ 1996.292531][T20771] name failslab, interval 1, probability 0, space 0, times 0 23:13:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 13) [ 1996.299013][T20771] CPU: 0 PID: 20771 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 23:13:35 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (fail_nth: 6) [ 1996.302767][T20771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1996.306157][T20771] Call Trace: [ 1996.307334][T20771] [ 1996.308403][T20771] dump_stack_lvl+0x136/0x150 [ 1996.310089][T20771] should_fail_ex+0x4a3/0x5b0 [ 1996.311787][T20771] should_failslab+0x9/0x20 [ 1996.313413][T20771] kmem_cache_alloc_bulk+0x68/0x860 [ 1996.315276][T20771] ? kmem_cache_alloc+0x337/0x3b0 [ 1996.317003][T20771] mas_alloc_nodes+0x332/0x880 [ 1996.318715][T20771] mas_preallocate+0x1bb/0x360 [ 1996.320419][T20771] __split_vma+0x1b7/0x830 [ 1996.322038][T20771] ? expand_stack+0x20/0x20 [ 1996.323658][T20771] do_vmi_align_munmap+0x400/0x1580 [ 1996.325519][T20771] ? __split_vma+0x830/0x830 [ 1996.327198][T20771] ? mtree_range_walk+0x63e/0x940 [ 1996.329030][T20771] do_vmi_munmap+0x26e/0x2c0 [ 1996.330676][T20771] mmap_region+0x1f0/0x28d0 [ 1996.332292][T20771] ? arch_get_unmapped_area+0x560/0x560 [ 1996.334567][T20771] ? validate_mm+0x1d4/0x290 23:13:35 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) socket$pppoe(0x18, 0x1, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0xffff0001) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x1, r4, 0x6c9, 0x5, 0x0, 0xbeb3, 0x7}) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x2010, r0, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x7) [ 1996.336609][T20771] ? do_munmap+0xf0/0xf0 [ 1996.338629][T20771] ? security_mmap_addr+0x77/0xa0 [ 1996.340890][T20771] ? get_unmapped_area+0x1e8/0x3c0 [ 1996.343095][T20771] do_mmap+0x831/0xf60 [ 1996.344902][T20771] vm_mmap_pgoff+0x1a2/0x3b0 [ 1996.346656][T20771] ? randomize_page+0xb0/0xb0 [ 1996.348713][T20771] ksys_mmap_pgoff+0x41f/0x5a0 [ 1996.350771][T20771] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1996.353087][T20771] __do_fast_syscall_32+0x65/0xf0 [ 1996.355212][T20771] do_fast_syscall_32+0x33/0x70 [ 1996.357001][T20771] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1996.359626][T20771] RIP: 0023:0xf7f29579 [ 1996.361387][T20771] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.368791][T20771] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1996.371717][T20771] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1996.374612][T20771] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1996.377840][T20771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.381141][T20771] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1996.384811][T20771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.387806][T20771] [ 1996.389067][ C0] vkms_vblank_simulate: vblank timer overrun 23:13:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 10) [ 1996.418191][T20773] FAULT_INJECTION: forcing a failure. [ 1996.418191][T20773] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.421684][T20775] FAULT_INJECTION: forcing a failure. [ 1996.421684][T20775] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.423326][T20773] CPU: 2 PID: 20773 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1996.423341][T20773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1996.423347][T20773] Call Trace: 23:13:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 11) [ 1996.423352][T20773] [ 1996.423356][T20773] dump_stack_lvl+0x136/0x150 [ 1996.423376][T20773] should_fail_ex+0x4a3/0x5b0 [ 1996.440873][T20773] should_failslab+0x9/0x20 [ 1996.442549][T20773] kmem_cache_alloc+0x63/0x3b0 [ 1996.444251][T20773] vm_area_dup+0x55/0x300 [ 1996.445798][T20773] __split_vma+0x199/0x830 [ 1996.447386][T20773] ? expand_stack+0x20/0x20 [ 1996.449019][T20773] do_vmi_align_munmap+0x400/0x1580 [ 1996.450845][T20773] ? __split_vma+0x830/0x830 [ 1996.452557][T20773] ? mtree_range_walk+0x63e/0x940 [ 1996.454363][T20773] do_vmi_munmap+0x26e/0x2c0 [ 1996.456049][T20773] mmap_region+0x1f0/0x28d0 [ 1996.457668][T20773] ? arch_get_unmapped_area+0x560/0x560 [ 1996.459628][T20773] ? validate_mm+0x1d4/0x290 [ 1996.461648][T20773] ? do_munmap+0xf0/0xf0 [ 1996.463400][T20773] ? security_mmap_addr+0x77/0xa0 [ 1996.465209][T20773] ? get_unmapped_area+0x1e8/0x3c0 [ 1996.467005][T20773] do_mmap+0x831/0xf60 [ 1996.468459][T20773] vm_mmap_pgoff+0x1a2/0x3b0 [ 1996.470097][T20773] ? randomize_page+0xb0/0xb0 [ 1996.470842][T20783] FAULT_INJECTION: forcing a failure. [ 1996.470842][T20783] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.471750][T20773] ksys_mmap_pgoff+0x41f/0x5a0 [ 1996.471765][T20773] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1996.471780][T20773] __do_fast_syscall_32+0x65/0xf0 [ 1996.471796][T20773] do_fast_syscall_32+0x33/0x70 [ 1996.484478][T20773] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1996.484502][T20773] RIP: 0023:0xf7f17579 [ 1996.484516][T20773] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.496007][T20773] RSP: 002b:00000000f7f125cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1996.499683][T20773] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 0000000000002000 23:13:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 12) 23:13:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0xffff0001) (async) ioctl$KDADDIO(r1, 0x4b34, 0xffff0001) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x1, r4, 0x6c9, 0x5, 0x0, 0xbeb3, 0x7}) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x2010, r0, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x7) [ 1996.502634][T20773] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 1996.505668][T20773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.509227][T20773] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1996.512159][T20773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.515562][T20773] [ 1996.516925][T20775] CPU: 1 PID: 20775 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1996.521058][T20775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1996.524659][T20775] Call Trace: [ 1996.526179][T20775] [ 1996.527330][T20775] dump_stack_lvl+0x136/0x150 [ 1996.529269][T20775] should_fail_ex+0x4a3/0x5b0 [ 1996.531294][T20775] should_failslab+0x9/0x20 [ 1996.533243][T20775] kmem_cache_alloc+0x63/0x3b0 [ 1996.535424][T20775] vm_area_alloc+0x142/0x230 [ 1996.537365][T20775] mmap_region+0x407/0x28d0 [ 1996.538985][T20775] ? validate_mm+0x1d4/0x290 [ 1996.540833][T20775] ? do_munmap+0xf0/0xf0 [ 1996.542362][T20775] ? security_mmap_addr+0x77/0xa0 [ 1996.544156][T20775] ? get_unmapped_area+0x1e8/0x3c0 [ 1996.546120][T20775] do_mmap+0x831/0xf60 [ 1996.547879][T20775] vm_mmap_pgoff+0x1a2/0x3b0 [ 1996.549537][T20775] ? randomize_page+0xb0/0xb0 [ 1996.551514][T20775] ksys_mmap_pgoff+0x41f/0x5a0 [ 1996.553619][T20775] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1996.555767][T20775] __do_fast_syscall_32+0x65/0xf0 [ 1996.557810][T20775] do_fast_syscall_32+0x33/0x70 [ 1996.559694][T20775] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1996.562339][T20775] RIP: 0023:0xf7fb1579 [ 1996.564204][T20775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.573016][T20775] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1996.576332][T20775] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1996.579681][T20775] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1996.582986][T20775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.586053][T20775] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1996.589159][T20775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.592417][T20775] [ 1996.593579][T20783] CPU: 0 PID: 20783 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1996.597704][T20783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1996.601141][T20783] Call Trace: [ 1996.601148][T20783] [ 1996.601155][T20783] dump_stack_lvl+0x136/0x150 23:13:36 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (fail_nth: 7) [ 1996.601188][T20783] should_fail_ex+0x4a3/0x5b0 [ 1996.601216][T20783] should_failslab+0x9/0x20 [ 1996.601233][T20783] kmem_cache_alloc+0x63/0x3b0 23:13:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 14) [ 1996.601256][T20783] ? mas_prev+0x168/0x720 [ 1996.601281][T20783] vm_area_alloc+0x20/0x230 [ 1996.601304][T20783] mmap_region+0x407/0x28d0 [ 1996.601331][T20783] ? validate_mm+0x1d4/0x290 23:13:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 13) [ 1996.601352][T20783] ? do_munmap+0xf0/0xf0 [ 1996.601377][T20783] ? security_mmap_addr+0x77/0xa0 [ 1996.601399][T20783] ? get_unmapped_area+0x1e8/0x3c0 [ 1996.601424][T20783] do_mmap+0x831/0xf60 [ 1996.601451][T20783] vm_mmap_pgoff+0x1a2/0x3b0 [ 1996.601481][T20783] ? randomize_page+0xb0/0xb0 [ 1996.601516][T20783] ksys_mmap_pgoff+0x41f/0x5a0 [ 1996.601539][T20783] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1996.601563][T20783] __do_fast_syscall_32+0x65/0xf0 [ 1996.601591][T20783] do_fast_syscall_32+0x33/0x70 [ 1996.601617][T20783] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1996.601635][T20783] RIP: 0023:0xf7f29579 [ 1996.601649][T20783] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.601666][T20783] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1996.601684][T20783] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1996.601696][T20783] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1996.601707][T20783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.601718][T20783] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1996.601728][T20783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.601751][T20783] [ 1996.612651][T20790] FAULT_INJECTION: forcing a failure. [ 1996.612651][T20790] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.679929][T20790] CPU: 1 PID: 20790 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1996.684312][T20790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1996.688039][T20790] Call Trace: [ 1996.689446][T20790] [ 1996.690700][T20790] dump_stack_lvl+0x136/0x150 [ 1996.692466][T20790] should_fail_ex+0x4a3/0x5b0 [ 1996.694387][T20790] should_failslab+0x9/0x20 [ 1996.696205][T20790] kmem_cache_alloc+0x63/0x3b0 [ 1996.698141][T20790] mas_alloc_nodes+0x4dd/0x880 [ 1996.700191][T20790] mas_preallocate+0x1bb/0x360 [ 1996.702126][T20790] __split_vma+0x1b7/0x830 [ 1996.704084][T20790] ? expand_stack+0x20/0x20 [ 1996.706160][T20790] do_vmi_align_munmap+0x400/0x1580 [ 1996.708643][T20790] ? __split_vma+0x830/0x830 [ 1996.710806][T20790] ? mtree_range_walk+0x63e/0x940 [ 1996.713063][T20790] do_vmi_munmap+0x26e/0x2c0 [ 1996.715123][T20790] mmap_region+0x1f0/0x28d0 [ 1996.717151][T20790] ? arch_get_unmapped_area+0x560/0x560 [ 1996.719593][T20790] ? validate_mm+0x1d4/0x290 [ 1996.721682][T20790] ? do_munmap+0xf0/0xf0 [ 1996.723605][T20790] ? security_mmap_addr+0x77/0xa0 [ 1996.725933][T20790] ? get_unmapped_area+0x1e8/0x3c0 [ 1996.728231][T20790] do_mmap+0x831/0xf60 [ 1996.730106][T20790] vm_mmap_pgoff+0x1a2/0x3b0 [ 1996.732034][T20790] ? randomize_page+0xb0/0xb0 [ 1996.734004][T20790] ksys_mmap_pgoff+0x41f/0x5a0 [ 1996.736145][T20790] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1996.738580][T20790] __do_fast_syscall_32+0x65/0xf0 [ 1996.740901][T20790] do_fast_syscall_32+0x33/0x70 [ 1996.743070][T20790] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1996.745873][T20790] RIP: 0023:0xf7f17579 [ 1996.747660][T20790] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.754545][T20790] RSP: 002b:00000000f7f125cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1996.757472][T20790] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 0000000000002000 [ 1996.760641][T20790] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 1996.764176][T20790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.767506][T20790] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1996.770339][T20790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.773687][T20790] 23:13:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) socket$pppoe(0x18, 0x1, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0xffff0001) (async) ioctl$KDADDIO(r1, 0x4b34, 0xffff0001) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x1, r4, 0x6c9, 0x5, 0x0, 0xbeb3, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x1, r4, 0x6c9, 0x5, 0x0, 0xbeb3, 0x7}) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x2010, r0, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x7) [ 1996.791224][T20793] FAULT_INJECTION: forcing a failure. [ 1996.791224][T20793] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.793907][T20795] FAULT_INJECTION: forcing a failure. [ 1996.793907][T20795] name failslab, interval 1, probability 0, space 0, times 0 23:13:36 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (fail_nth: 8) [ 1996.795698][T20793] CPU: 1 PID: 20793 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1996.795711][T20793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1996.795717][T20793] Call Trace: [ 1996.795721][T20793] [ 1996.795726][T20793] dump_stack_lvl+0x136/0x150 [ 1996.795750][T20793] should_fail_ex+0x4a3/0x5b0 [ 1996.814569][T20793] should_failslab+0x9/0x20 [ 1996.816262][T20793] __kmem_cache_alloc_node+0x5b/0x320 [ 1996.817973][T20799] FAULT_INJECTION: forcing a failure. [ 1996.817973][T20799] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.818205][T20793] ? usbdev_mmap+0x1c9/0xc40 [ 1996.825810][T20793] ? mark_held_locks+0x9f/0xe0 [ 1996.827983][T20793] kmalloc_trace+0x26/0xe0 [ 1996.830013][T20793] usbdev_mmap+0x1c9/0xc40 [ 1996.832046][T20793] ? usbdev_vm_close+0x50/0x50 [ 1996.834216][T20793] ? __raw_spin_lock_init+0x3a/0x110 [ 1996.836591][T20793] mmap_region+0x694/0x28d0 [ 1996.838708][T20793] ? do_munmap+0xf0/0xf0 [ 1996.838739][T20793] ? security_mmap_addr+0x77/0xa0 [ 1996.838761][T20793] ? get_unmapped_area+0x1e8/0x3c0 [ 1996.838785][T20793] do_mmap+0x831/0xf60 [ 1996.838810][T20793] vm_mmap_pgoff+0x1a2/0x3b0 [ 1996.838839][T20793] ? randomize_page+0xb0/0xb0 [ 1996.838873][T20793] ksys_mmap_pgoff+0x41f/0x5a0 23:13:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x83, 0x341902) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004850}, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7800, 0x80, 0x1ff, 0x54a3, {{0x8, 0x4, 0x3, 0x35, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@generic={0x82, 0xc, "3c7937bd24803bafeef1"}]}}}}}) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x480101, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) 23:13:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 15) [ 1996.838897][T20793] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1996.838923][T20793] __do_fast_syscall_32+0x65/0xf0 [ 1996.838951][T20793] do_fast_syscall_32+0x33/0x70 [ 1996.838982][T20793] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1996.839001][T20793] RIP: 0023:0xf7fb1579 23:13:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 16) [ 1996.839015][T20793] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.839032][T20793] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1996.839051][T20793] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1996.839063][T20793] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1996.839074][T20793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.839085][T20793] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1996.839097][T20793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.839118][T20793] [ 1996.839127][T20799] CPU: 3 PID: 20799 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1996.839153][T20799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1996.839162][T20799] Call Trace: [ 1996.839167][T20799] [ 1996.839173][T20799] dump_stack_lvl+0x136/0x150 [ 1996.839198][T20799] should_fail_ex+0x4a3/0x5b0 [ 1996.839222][T20799] should_failslab+0x9/0x20 [ 1996.839235][T20799] kmem_cache_alloc_bulk+0x68/0x860 [ 1996.839257][T20799] ? kmem_cache_alloc+0x337/0x3b0 [ 1996.839278][T20799] mas_alloc_nodes+0x332/0x880 [ 1996.839302][T20799] mas_preallocate+0x1bb/0x360 [ 1996.839324][T20799] __split_vma+0x1b7/0x830 [ 1996.839347][T20799] ? expand_stack+0x20/0x20 [ 1996.839376][T20799] do_vmi_align_munmap+0x400/0x1580 [ 1996.839407][T20799] ? __split_vma+0x830/0x830 [ 1996.839439][T20799] ? mtree_range_walk+0x63e/0x940 [ 1996.839491][T20799] do_vmi_munmap+0x26e/0x2c0 [ 1996.839520][T20799] mmap_region+0x1f0/0x28d0 [ 1996.839547][T20799] ? arch_get_unmapped_area+0x560/0x560 [ 1996.839572][T20799] ? validate_mm+0x1d4/0x290 [ 1996.839594][T20799] ? do_munmap+0xf0/0xf0 [ 1996.839621][T20799] ? security_mmap_addr+0x77/0xa0 [ 1996.881405][T20806] FAULT_INJECTION: forcing a failure. [ 1996.881405][T20806] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1996.881475][T20799] ? get_unmapped_area+0x1e8/0x3c0 [ 1996.953999][T20799] do_mmap+0x831/0xf60 [ 1996.955882][T20799] vm_mmap_pgoff+0x1a2/0x3b0 [ 1996.957978][T20799] ? randomize_page+0xb0/0xb0 [ 1996.960019][T20799] ksys_mmap_pgoff+0x41f/0x5a0 [ 1996.962096][T20799] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1996.964415][T20799] __do_fast_syscall_32+0x65/0xf0 23:13:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x83, 0x341902) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCSETAF(r0, 0x5408, 0x0) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004850}, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7800, 0x80, 0x1ff, 0x54a3, {{0x8, 0x4, 0x3, 0x35, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@generic={0x82, 0xc, "3c7937bd24803bafeef1"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7800, 0x80, 0x1ff, 0x54a3, {{0x8, 0x4, 0x3, 0x35, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@generic={0x82, 0xc, "3c7937bd24803bafeef1"}]}}}}}) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x480101, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) [ 1996.966606][T20799] do_fast_syscall_32+0x33/0x70 [ 1996.968879][T20799] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1996.971571][T20799] RIP: 0023:0xf7f17579 [ 1996.973417][T20799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1996.981781][T20799] RSP: 002b:00000000f7f125cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1996.985306][T20799] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 0000000000002000 [ 1996.988764][T20799] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 1996.992153][T20799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.995689][T20799] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1996.999172][T20799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.002616][T20799] [ 1997.003961][T20806] CPU: 1 PID: 20806 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1997.008539][T20806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1997.012245][T20806] Call Trace: [ 1997.013658][T20806] [ 1997.014938][T20806] dump_stack_lvl+0x136/0x150 [ 1997.016984][T20806] should_fail_ex+0x4a3/0x5b0 [ 1997.018999][T20806] prepare_alloc_pages+0x178/0x570 [ 1997.021084][T20806] __alloc_pages+0x149/0x4a0 [ 1997.022763][T20806] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 23:13:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x83, 0x341902) (async) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004850}, 0x0) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7800, 0x80, 0x1ff, 0x54a3, {{0x8, 0x4, 0x3, 0x35, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@generic={0x82, 0xc, "3c7937bd24803bafeef1"}]}}}}}) (async) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x480101, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) [ 1997.025182][T20806] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1997.027802][T20806] ? pat_enabled+0x20/0x20 [ 1997.029713][T20806] ? walk_mem_res+0x160/0x160 [ 1997.031773][T20806] alloc_pages+0x1aa/0x270 [ 1997.033446][T20806] pte_alloc_one+0x1a/0x230 [ 1997.035225][T20806] __pte_alloc+0x6d/0x260 [ 1997.037022][T20806] ? pmd_install+0x160/0x160 [ 1997.038689][T20806] remap_pfn_range_notrack+0x9fb/0xea0 [ 1997.040657][T20806] ? apply_to_existing_page_range+0x40/0x40 [ 1997.042773][T20806] remap_pfn_range+0xca/0x140 [ 1997.044480][T20806] ? remap_pfn_range_notrack+0xea0/0xea0 [ 1997.046595][T20806] ? hcd_buffer_alloc+0x19a/0x290 [ 1997.048735][T20806] usbdev_mmap+0x414/0xc40 [ 1997.050694][T20806] ? usbdev_vm_close+0x50/0x50 [ 1997.052662][T20806] ? __raw_spin_lock_init+0x3a/0x110 [ 1997.055032][T20806] mmap_region+0x694/0x28d0 [ 1997.057045][T20806] ? do_munmap+0xf0/0xf0 [ 1997.058970][T20806] ? security_mmap_addr+0x77/0xa0 [ 1997.061344][T20806] ? get_unmapped_area+0x1e8/0x3c0 [ 1997.063720][T20806] do_mmap+0x831/0xf60 [ 1997.065624][T20806] vm_mmap_pgoff+0x1a2/0x3b0 [ 1997.067398][T20806] ? randomize_page+0xb0/0xb0 [ 1997.069127][T20806] ksys_mmap_pgoff+0x41f/0x5a0 [ 1997.070968][T20806] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1997.073383][T20806] __do_fast_syscall_32+0x65/0xf0 [ 1997.075500][T20806] do_fast_syscall_32+0x33/0x70 [ 1997.077467][T20806] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1997.079877][T20806] RIP: 0023:0xf7fb1579 [ 1997.081403][T20806] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1997.088691][T20806] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1997.091941][T20806] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1997.095424][T20806] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1997.098545][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1997.101822][T20806] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1997.104628][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.107484][T20806] [ 1997.108662][T20795] CPU: 3 PID: 20795 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1997.113448][T20795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1997.117589][T20795] Call Trace: [ 1997.119150][T20795] [ 1997.120566][T20795] dump_stack_lvl+0x136/0x150 [ 1997.122777][T20795] should_fail_ex+0x4a3/0x5b0 [ 1997.124986][T20795] should_failslab+0x9/0x20 [ 1997.127036][T20795] kmem_cache_alloc+0x63/0x3b0 [ 1997.129271][T20795] vm_area_alloc+0x142/0x230 [ 1997.131396][T20795] mmap_region+0x407/0x28d0 [ 1997.133512][T20795] ? validate_mm+0x1d4/0x290 [ 1997.135671][T20795] ? do_munmap+0xf0/0xf0 [ 1997.137648][T20795] ? security_mmap_addr+0x77/0xa0 [ 1997.139974][T20795] ? get_unmapped_area+0x1e8/0x3c0 [ 1997.142354][T20795] do_mmap+0x831/0xf60 [ 1997.144248][T20795] vm_mmap_pgoff+0x1a2/0x3b0 [ 1997.146404][T20795] ? randomize_page+0xb0/0xb0 [ 1997.148603][T20795] ksys_mmap_pgoff+0x41f/0x5a0 [ 1997.150813][T20795] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1997.153293][T20795] __do_fast_syscall_32+0x65/0xf0 [ 1997.155663][T20795] do_fast_syscall_32+0x33/0x70 [ 1997.157921][T20795] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1997.160808][T20795] RIP: 0023:0xf7f29579 [ 1997.162656][T20795] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1997.171180][T20795] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1997.174977][T20795] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1997.178562][T20795] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1997.182156][T20795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1997.185573][T20795] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1997.189169][T20795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.192784][T20795] 23:13:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 14) 23:13:36 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (fail_nth: 9) 23:13:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x480806) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x4004000) 23:13:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 17) [ 1997.213266][T20820] FAULT_INJECTION: forcing a failure. [ 1997.213266][T20820] name failslab, interval 1, probability 0, space 0, times 0 23:13:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x480806) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x4004000) [ 1997.215826][T20822] FAULT_INJECTION: forcing a failure. [ 1997.215826][T20822] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.219294][T20820] CPU: 1 PID: 20820 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1997.229143][T20820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1997.233058][T20820] Call Trace: [ 1997.234573][T20820] [ 1997.235892][T20820] dump_stack_lvl+0x136/0x150 [ 1997.238020][T20820] should_fail_ex+0x4a3/0x5b0 [ 1997.240132][T20820] should_failslab+0x9/0x20 23:13:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x480806) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x480806) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x4004000) [ 1997.242150][T20820] __kmem_cache_alloc_node+0x5b/0x320 [ 1997.244681][T20820] ? usbdev_mmap+0x1c9/0xc40 [ 1997.246685][T20820] ? mark_held_locks+0x9f/0xe0 [ 1997.248738][T20820] kmalloc_trace+0x26/0xe0 [ 1997.250747][T20820] usbdev_mmap+0x1c9/0xc40 [ 1997.252625][T20820] ? usbdev_vm_close+0x50/0x50 [ 1997.254725][T20820] ? __raw_spin_lock_init+0x3a/0x110 [ 1997.257128][T20820] mmap_region+0x694/0x28d0 [ 1997.259147][T20820] ? do_munmap+0xf0/0xf0 23:13:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x40) [ 1997.261039][T20820] ? security_mmap_addr+0x77/0xa0 [ 1997.263419][T20820] ? get_unmapped_area+0x1e8/0x3c0 [ 1997.265692][T20820] do_mmap+0x831/0xf60 [ 1997.267525][T20820] vm_mmap_pgoff+0x1a2/0x3b0 [ 1997.269592][T20820] ? randomize_page+0xb0/0xb0 [ 1997.271699][T20820] ksys_mmap_pgoff+0x41f/0x5a0 [ 1997.273919][T20820] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1997.276319][T20820] __do_fast_syscall_32+0x65/0xf0 [ 1997.278912][T20820] do_fast_syscall_32+0x33/0x70 [ 1997.281214][T20820] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1997.283882][T20820] RIP: 0023:0xf7f29579 [ 1997.285642][T20820] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1997.293853][T20820] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1997.297451][T20820] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1997.300849][T20820] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1997.304219][T20820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1997.307695][T20820] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1997.311114][T20820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.314305][T20820] 23:13:36 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (fail_nth: 10) [ 1997.315492][T20822] CPU: 2 PID: 20822 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1997.320245][T20822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1997.324247][T20822] Call Trace: [ 1997.325730][T20822] [ 1997.326817][T20822] dump_stack_lvl+0x136/0x150 [ 1997.328729][T20822] should_fail_ex+0x4a3/0x5b0 [ 1997.330388][T20822] should_failslab+0x9/0x20 [ 1997.330695][T20832] FAULT_INJECTION: forcing a failure. [ 1997.330695][T20832] name failslab, interval 1, probability 0, space 0, times 0 23:13:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 15) [ 1997.331980][T20822] kmem_cache_alloc+0x63/0x3b0 [ 1997.338767][T20822] ptlock_alloc+0x21/0x70 [ 1997.340748][T20822] pte_alloc_one+0x6c/0x230 [ 1997.342971][T20822] __pte_alloc+0x6d/0x260 [ 1997.344945][T20822] ? pmd_install+0x160/0x160 [ 1997.346694][T20822] remap_pfn_range_notrack+0x9fb/0xea0 [ 1997.348802][T20822] ? apply_to_existing_page_range+0x40/0x40 [ 1997.350939][T20822] remap_pfn_range+0xca/0x140 [ 1997.352642][T20822] ? remap_pfn_range_notrack+0xea0/0xea0 [ 1997.354625][T20822] ? hcd_buffer_alloc+0x19a/0x290 [ 1997.356604][T20822] usbdev_mmap+0x414/0xc40 [ 1997.358659][T20822] ? usbdev_vm_close+0x50/0x50 [ 1997.360760][T20822] ? __raw_spin_lock_init+0x3a/0x110 [ 1997.363158][T20822] mmap_region+0x694/0x28d0 [ 1997.365151][T20822] ? do_munmap+0xf0/0xf0 [ 1997.367080][T20822] ? security_mmap_addr+0x77/0xa0 [ 1997.369346][T20822] ? get_unmapped_area+0x1e8/0x3c0 [ 1997.371703][T20822] do_mmap+0x831/0xf60 [ 1997.373745][T20822] vm_mmap_pgoff+0x1a2/0x3b0 [ 1997.375933][T20822] ? randomize_page+0xb0/0xb0 [ 1997.378110][T20822] ksys_mmap_pgoff+0x41f/0x5a0 [ 1997.380355][T20822] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1997.382800][T20822] __do_fast_syscall_32+0x65/0xf0 [ 1997.385066][T20822] do_fast_syscall_32+0x33/0x70 [ 1997.387237][T20822] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1997.389332][T20839] FAULT_INJECTION: forcing a failure. [ 1997.389332][T20839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1997.389949][T20822] RIP: 0023:0xf7fb1579 [ 1997.389965][T20822] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1997.389982][T20822] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1997.390001][T20822] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1997.411525][T20822] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1997.414769][T20822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1997.418030][T20822] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1997.421330][T20822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.424625][T20822] 23:13:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 16) 23:13:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x40) syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x40) (async) [ 1997.425920][T20839] CPU: 3 PID: 20839 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1997.430534][T20839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1997.434143][T20839] Call Trace: [ 1997.435689][T20839] [ 1997.436972][T20839] dump_stack_lvl+0x136/0x150 [ 1997.438725][T20839] should_fail_ex+0x4a3/0x5b0 [ 1997.440460][T20839] prepare_alloc_pages+0x178/0x570 [ 1997.442350][T20839] __alloc_pages+0x149/0x4a0 [ 1997.444011][T20839] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 23:13:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (fail_nth: 18) [ 1997.446362][T20839] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1997.448912][T20839] ? pat_enabled+0x20/0x20 [ 1997.450701][T20839] ? walk_mem_res+0x160/0x160 [ 1997.452875][T20839] alloc_pages+0x1aa/0x270 [ 1997.454928][T20842] FAULT_INJECTION: forcing a failure. [ 1997.454928][T20842] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.454944][T20839] pte_alloc_one+0x1a/0x230 [ 1997.461858][T20839] __pte_alloc+0x6d/0x260 [ 1997.463644][T20839] ? pmd_install+0x160/0x160 [ 1997.465581][T20839] remap_pfn_range_notrack+0x9fb/0xea0 [ 1997.467881][T20839] ? apply_to_existing_page_range+0x40/0x40 [ 1997.470363][T20839] remap_pfn_range+0xca/0x140 [ 1997.472298][T20839] ? remap_pfn_range_notrack+0xea0/0xea0 [ 1997.474599][T20839] ? hcd_buffer_alloc+0x19a/0x290 [ 1997.476791][T20839] usbdev_mmap+0x414/0xc40 [ 1997.478593][T20839] ? usbdev_vm_close+0x50/0x50 [ 1997.480450][T20839] ? __raw_spin_lock_init+0x3a/0x110 [ 1997.482597][T20839] mmap_region+0x694/0x28d0 [ 1997.484291][T20839] ? do_munmap+0xf0/0xf0 [ 1997.485955][T20839] ? security_mmap_addr+0x77/0xa0 [ 1997.487872][T20839] ? get_unmapped_area+0x1e8/0x3c0 [ 1997.489760][T20839] do_mmap+0x831/0xf60 [ 1997.491309][T20839] vm_mmap_pgoff+0x1a2/0x3b0 [ 1997.493250][T20839] ? randomize_page+0xb0/0xb0 [ 1997.495545][T20839] ksys_mmap_pgoff+0x41f/0x5a0 [ 1997.497832][T20839] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1997.500443][T20839] __do_fast_syscall_32+0x65/0xf0 [ 1997.502652][T20839] do_fast_syscall_32+0x33/0x70 [ 1997.504601][T20839] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1997.506790][T20839] RIP: 0023:0xf7f29579 [ 1997.508549][T20839] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1997.516239][T20839] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1997.519601][T20839] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1997.522777][T20839] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1997.525923][T20839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1997.529121][T20839] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1997.532314][T20839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.535536][T20839] [ 1997.536818][T20832] CPU: 1 PID: 20832 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 23:13:37 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x40) syz_open_dev$usbfs(&(0x7f0000000040), 0xfae, 0x0) (async) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x40) (async) [ 1997.541621][T20832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1997.545708][T20832] Call Trace: [ 1997.547221][T20832] [ 1997.548597][T20832] dump_stack_lvl+0x136/0x150 [ 1997.550729][T20832] should_fail_ex+0x4a3/0x5b0 [ 1997.552824][T20832] should_failslab+0x9/0x20 [ 1997.554906][T20832] kmem_cache_alloc+0x63/0x3b0 [ 1997.557122][T20832] ? mas_prev+0x168/0x720 [ 1997.559084][T20832] vm_area_alloc+0x20/0x230 [ 1997.561159][T20832] mmap_region+0x407/0x28d0 23:13:37 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 17) [ 1997.563220][T20832] ? validate_mm+0x1d4/0x290 [ 1997.565564][T20832] ? do_munmap+0xf0/0xf0 [ 1997.567504][T20832] ? security_mmap_addr+0x77/0xa0 [ 1997.569829][T20832] ? get_unmapped_area+0x1e8/0x3c0 [ 1997.572112][T20832] do_mmap+0x831/0xf60 [ 1997.574033][T20832] vm_mmap_pgoff+0x1a2/0x3b0 [ 1997.576160][T20832] ? randomize_page+0xb0/0xb0 [ 1997.577902][T20845] FAULT_INJECTION: forcing a failure. [ 1997.577902][T20845] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.578324][T20832] ksys_mmap_pgoff+0x41f/0x5a0 [ 1997.584968][T20832] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1997.587410][T20832] __do_fast_syscall_32+0x65/0xf0 [ 1997.589776][T20832] do_fast_syscall_32+0x33/0x70 [ 1997.592016][T20832] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1997.594950][T20832] RIP: 0023:0xf7f17579 [ 1997.596798][T20832] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1997.605411][T20832] RSP: 002b:00000000f7f125cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1997.609083][T20832] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 0000000000002000 [ 1997.612460][T20832] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 1997.615968][T20832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1997.619499][T20832] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1997.623050][T20832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.626478][T20832] [ 1997.627919][T20842] CPU: 3 PID: 20842 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1997.632109][T20842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1997.635670][T20842] Call Trace: [ 1997.637048][T20842] [ 1997.638251][T20842] dump_stack_lvl+0x136/0x150 23:13:37 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (fail_nth: 11) [ 1997.640166][T20842] should_fail_ex+0x4a3/0x5b0 [ 1997.642273][T20842] should_failslab+0x9/0x20 [ 1997.644103][T20842] kmem_cache_alloc+0x63/0x3b0 [ 1997.646049][T20842] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 1997.648415][T20842] mas_alloc_nodes+0x4dd/0x880 [ 1997.650344][T20842] mas_preallocate+0x1bb/0x360 [ 1997.652275][T20842] mmap_region+0x84c/0x28d0 [ 1997.654069][T20842] ? do_munmap+0xf0/0xf0 [ 1997.655765][T20842] ? security_mmap_addr+0x77/0xa0 [ 1997.657832][T20842] ? get_unmapped_area+0x1e8/0x3c0 [ 1997.659903][T20842] do_mmap+0x831/0xf60 [ 1997.661569][T20842] vm_mmap_pgoff+0x1a2/0x3b0 [ 1997.663450][T20842] ? randomize_page+0xb0/0xb0 [ 1997.663475][T20848] FAULT_INJECTION: forcing a failure. [ 1997.663475][T20848] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.665368][T20842] ksys_mmap_pgoff+0x41f/0x5a0 [ 1997.665394][T20842] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1997.665414][T20842] __do_fast_syscall_32+0x65/0xf0 [ 1997.665437][T20842] do_fast_syscall_32+0x33/0x70 [ 1997.665458][T20842] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1997.665474][T20842] RIP: 0023:0xf7fb1579 [ 1997.665486][T20842] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1997.665500][T20842] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1997.665516][T20842] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1997.665526][T20842] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1997.665535][T20842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1997.665544][T20842] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1997.665553][T20842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.665572][T20842] [ 1997.665579][T20845] CPU: 2 PID: 20845 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1997.665596][T20845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1997.665602][T20845] Call Trace: [ 1997.665605][T20845] [ 1997.665610][T20845] dump_stack_lvl+0x136/0x150 [ 1997.665629][T20845] should_fail_ex+0x4a3/0x5b0 [ 1997.665646][T20845] should_failslab+0x9/0x20 [ 1997.665656][T20845] kmem_cache_alloc+0x63/0x3b0 [ 1997.665672][T20845] ptlock_alloc+0x21/0x70 [ 1997.665703][T20845] pte_alloc_one+0x6c/0x230 [ 1997.665718][T20845] __pte_alloc+0x6d/0x260 [ 1997.665734][T20845] ? pmd_install+0x160/0x160 [ 1997.671154][T20842] ------------[ cut here ]------------ [ 1997.671240][T20842] kernel BUG at mm/page_table_check.c:142! [ 1997.671257][T20842] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1997.671269][T20842] CPU: 3 PID: 20842 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1997.671284][T20842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1997.671291][T20842] RIP: 0010:__page_table_check_zero+0x175/0x1c0 [ 1997.671316][T20842] Code: 24 08 80 38 00 75 47 48 03 2d 17 d3 04 10 49 83 c4 01 e9 00 ff ff ff e8 99 4e a2 ff 0f 0b e8 92 4e a2 ff 0f 0b e8 8b 4e a2 ff <0f> 0b e8 84 4e a2 ff 0f 0b e8 7d 4e a2 ff 48 89 ef 48 83 c4 10 5b [ 1997.671329][T20842] RSP: 0018:ffffc900290ffa88 EFLAGS: 00010246 [ 1997.671341][T20842] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc9000d3a4000 [ 1997.673068][T20845] remap_pfn_range_notrack+0x9fb/0xea0 [ 1997.675211][T20842] RDX: 0000000000040000 RSI: ffffffff81e1f445 RDI: 0000000000000005 [ 1997.677007][T20845] ? apply_to_existing_page_range+0x40/0x40 [ 1997.678922][T20842] RBP: ffff88801398f060 R08: 0000000000000005 R09: 0000000000000000 [ 1997.681108][T20845] remap_pfn_range+0xca/0x140 [ 1997.682724][T20842] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1997.690848][T20845] ? remap_pfn_range_notrack+0xea0/0xea0 [ 1997.694088][T20842] R13: 0000000000000002 R14: 0000000000000004 R15: dffffc0000000000 [ 1997.697760][T20845] ? hcd_buffer_alloc+0x19a/0x290 [ 1997.700897][T20842] FS: 0000000000000000(0000) GS:ffff88802c900000(0063) knlGS:00000000f7facb40 [ 1997.704090][T20845] usbdev_mmap+0x414/0xc40 [ 1997.707232][T20842] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1997.710700][T20845] ? usbdev_vm_close+0x50/0x50 [ 1997.711918][T20842] CR2: 00000000576c1404 CR3: 0000000028e41000 CR4: 0000000000350ee0 [ 1997.716444][T20845] ? __raw_spin_lock_init+0x3a/0x110 [ 1997.719968][T20842] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1997.721373][T20845] mmap_region+0x694/0x28d0 [ 1997.722544][T20842] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1997.724564][T20845] ? do_munmap+0xf0/0xf0 [ 1997.726416][T20842] Call Trace: [ 1997.726422][T20842] [ 1997.728342][T20845] ? security_mmap_addr+0x77/0xa0 [ 1997.730258][T20842] free_unref_page_prepare+0x70f/0xcb0 [ 1997.732055][T20845] ? get_unmapped_area+0x1e8/0x3c0 [ 1997.733848][T20842] free_unref_page+0x33/0x370 [ 1997.735842][T20845] do_mmap+0x831/0xf60 23:13:37 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfb1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (fail_nth: 18) [ 1997.737669][T20842] hcd_buffer_free+0x1b9/0x250 [ 1997.740065][T20845] vm_mmap_pgoff+0x1a2/0x3b0 23:13:37 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb0, 0x20200) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xfef, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0x6, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) [ 1997.742390][T20842] usb_free_coherent+0x6b/0x80 [ 1997.745040][T20845] ? randomize_page+0xb0/0xb0 [ 1997.749099][T20842] dec_usb_memory_use_count+0x253/0x3f0 23:13:37 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb0, 0x20200) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xfef, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0x6, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) [ 1997.752919][T20845] ksys_mmap_pgoff+0x41f/0x5a0 [ 1997.756016][T20842] ? mas_preallocate+0x163/0x360 [ 1997.763679][T20845] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1997.766099][T20842] ? dec_usb_memory_use_count+0x3f0/0x3f0 [ 1997.768960][T20845] __do_fast_syscall_32+0x65/0xf0 23:13:37 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040), 0xfb0, 0x20200) r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xfef, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0x6, 0x4) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) [ 1997.771358][T20842] mmap_region+0x1ad4/0x28d0 [ 1997.774190][T20845] do_fast_syscall_32+0x33/0x70 [ 1997.777055][T20842] ? do_munmap+0xf0/0xf0 [ 1997.780427][T20845] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1997.782519][T20842] ? security_mmap_addr+0x77/0xa0 [ 1997.785510][T20845] RIP: 0023:0xf7f29579 [ 1997.787979][T20842] ? get_unmapped_area+0x1e8/0x3c0 [ 1997.790800][T20845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1997.793004][T20842] do_mmap+0x831/0xf60 [ 1997.796179][T20845] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 [ 1997.798166][T20842] vm_mmap_pgoff+0x1a2/0x3b0 [ 1997.800546][T20845] ORIG_RAX: 00000000000000c0 [ 1997.800552][T20845] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1997.802654][T20842] ? randomize_page+0xb0/0xb0 [ 1997.805442][T20845] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1997.807763][T20842] ksys_mmap_pgoff+0x41f/0x5a0 [ 1997.810793][T20845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1997.812784][T20842] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1997.815583][T20845] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1997.817458][T20842] __do_fast_syscall_32+0x65/0xf0 [ 1997.818780][T20845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.820064][T20842] do_fast_syscall_32+0x33/0x70 [ 1997.821941][T20845] [ 1997.824315][T20842] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1997.826229][T20848] CPU: 1 PID: 20848 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1997.828287][T20842] RIP: 0023:0xf7fb1579 [ 1997.830193][T20848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1997.832510][T20842] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1997.834649][T20848] Call Trace: [ 1997.836842][T20842] RSP: 002b:00000000f7fac5cc EFLAGS: 00000296 [ 1997.838975][T20848] [ 1997.840458][T20854] FAULT_INJECTION: forcing a failure. [ 1997.840458][T20854] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.841414][T20842] ORIG_RAX: 00000000000000c0 [ 1997.841423][T20842] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1997.843613][T20848] dump_stack_lvl+0x136/0x150 [ 1997.845657][T20842] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000003 [ 1997.848046][T20848] should_fail_ex+0x4a3/0x5b0 [ 1997.850578][T20842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1997.852806][T20848] should_failslab+0x9/0x20 [ 1997.854810][T20842] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1997.856982][T20848] kmem_cache_alloc+0x63/0x3b0 [ 1997.858813][T20842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.861686][T20848] vm_area_alloc+0x142/0x230 [ 1997.863885][T20842] [ 1997.865741][T20848] mmap_region+0x407/0x28d0 [ 1997.868007][T20842] Modules linked in: [ 1997.876427][T20848] ? validate_mm+0x1d4/0x290 [ 1997.878820][T20842] ---[ end trace 0000000000000000 ]--- [ 1997.880764][T20848] ? do_munmap+0xf0/0xf0 [ 1997.882968][T20842] RIP: 0010:__page_table_check_zero+0x175/0x1c0 [ 1997.885102][T20848] ? security_mmap_addr+0x77/0xa0 [ 1997.888533][T20842] Code: 24 08 80 38 00 75 47 48 03 2d 17 d3 04 10 49 83 c4 01 e9 00 ff ff ff e8 99 4e a2 ff 0f 0b e8 92 4e a2 ff 0f 0b e8 8b 4e a2 ff <0f> 0b e8 84 4e a2 ff 0f 0b e8 7d 4e a2 ff 48 89 ef 48 83 c4 10 5b [ 1997.890582][T20848] ? get_unmapped_area+0x1e8/0x3c0 [ 1997.893710][T20842] RSP: 0018:ffffc900290ffa88 EFLAGS: 00010246 [ 1997.895899][T20848] do_mmap+0x831/0xf60 [ 1997.898833][T20842] [ 1997.901213][T20848] vm_mmap_pgoff+0x1a2/0x3b0 [ 1997.904147][T20842] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc9000d3a4000 [ 1997.906455][T20848] ? randomize_page+0xb0/0xb0 [ 1997.909352][T20842] RDX: 0000000000040000 RSI: ffffffff81e1f445 RDI: 0000000000000005 [ 1997.911504][T20848] ksys_mmap_pgoff+0x41f/0x5a0 [ 1997.912689][T20842] RBP: ffff88801398f060 R08: 0000000000000005 R09: 0000000000000000 [ 1997.915458][T20848] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1997.919309][T20842] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1997.921125][T20848] __do_fast_syscall_32+0x65/0xf0 [ 1997.924408][T20842] R13: 0000000000000002 R14: 0000000000000004 R15: dffffc0000000000 [ 1997.932744][T20848] do_fast_syscall_32+0x33/0x70 [ 1997.932781][T20848] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1997.932802][T20848] RIP: 0023:0xf7f17579 [ 1997.934180][T20842] FS: 0000000000000000(0000) GS:ffff88802c800000(0063) knlGS:00000000f7facb40 [ 1997.936907][T20848] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1997.936924][T20848] RSP: 002b:00000000f7f125cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1997.936939][T20848] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 0000000000002000 [ 1997.936948][T20848] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 1997.936958][T20848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1997.936966][T20848] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1997.936975][T20848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.936989][T20848] [ 1997.937366][T20854] CPU: 0 PID: 20854 Comm: syz-executor.0 Tainted: G D 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0 [ 1997.938686][T20842] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1997.943183][T20854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1997.945166][T20842] CR2: 00000000f734e1b0 CR3: 0000000028e41000 CR4: 0000000000350ee0 [ 1997.948611][T20854] Call Trace: [ 1997.948619][T20854] [ 1997.948625][T20854] dump_stack_lvl+0x136/0x150 [ 1997.948657][T20854] should_fail_ex+0x4a3/0x5b0 [ 1997.950633][T20842] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1997.954073][T20854] should_failslab+0x9/0x20 [ 1997.955756][T20842] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1997.959120][T20854] kmem_cache_alloc+0x63/0x3b0 [ 1997.959144][T20854] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 1997.959167][T20854] mas_alloc_nodes+0x4dd/0x880 [ 1997.960848][T20842] Kernel panic - not syncing: Fatal exception [ 1997.964125][T20854] mas_preallocate+0x1bb/0x360 [ 1997.966182][T20854] mmap_region+0x84c/0x28d0 [ 1997.969649][T20854] ? do_munmap+0xf0/0xf0 [ 1997.971705][T20854] ? security_mmap_addr+0x77/0xa0 [ 1997.973077][T20854] ? get_unmapped_area+0x1e8/0x3c0 [ 1997.975059][T20854] do_mmap+0x831/0xf60 [ 1997.976785][T20854] vm_mmap_pgoff+0x1a2/0x3b0 [ 1997.978811][T20854] ? randomize_page+0xb0/0xb0 [ 1997.981201][T20854] ksys_mmap_pgoff+0x41f/0x5a0 [ 1997.982989][T20854] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1997.985560][T20854] __do_fast_syscall_32+0x65/0xf0 [ 1997.987638][T20854] do_fast_syscall_32+0x33/0x70 [ 1997.995997][T20854] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1997.998243][T20854] RIP: 0023:0xf7f29579 [ 1998.000884][T20854] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1998.002666][T20854] RSP: 002b:00000000f7f245cc EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1998.005729][T20854] RAX: ffffffffffffffda RBX: 0000000020ffa000 RCX: 0000000000003000 [ 1998.009003][T20854] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 1998.010967][T20854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1998.013734][T20854] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 1998.015478][T20854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1998.018275][T20854] [ 1998.020557][T20842] Kernel Offset: disabled [ 1998.160804][T20842] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:13:36 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802c843220 RCX=ffffffff81790243 RDX=ffff88801648a400 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90028387940 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005908645 R13=0000000000000002 R14=dffffc0000000000 R15=0000000000000001 RIP=ffffffff81843e25 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000581a7404 CR3=000000000c571000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=00000000000000002e06b1ef39122a50 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000040000 RBX=0000000000000002 RCX=ffffc90003919000 RDX=0000000000040000 RSI=ffffffff8168093a RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90002d8fb50 R8 =0000000000000005 R9 =00000000ffffffff R10=0000000000000002 R11=0000000000000000 R12=ffffffff8b8b92e0 R13=ffffffff8c91a410 R14=0000000000000000 R15=ffffffff814b3012 RIP=ffffffff8168093c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7ed5d80 CR3=00000000269ac000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84880675 RDI=ffffffff920c51c0 RBP=ffffffff920c5180 RSP=ffffc90002f77308 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000065646f43 R12=0000000000000000 R13=0000000000000037 R14=ffffffff84880610 R15=0000000000000000 RIP=ffffffff8488069f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c800000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73747ec CR3=0000000025107000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000040000 RBX=0000000000000001 RCX=ffffc9000d3a4000 RDX=0000000000040000 RSI=ffffffff8168a376 RDI=0000000000000001 RBP=ffffc900290ff6e8 RSP=ffffc900290ff6b0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000094001 R12=000000000000001e R13=ffff88801e238000 R14=0000000000000000 R15=ffffc900290ff738 RIP=ffffffff8168a378 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c900000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000576c1404 CR3=0000000028e41000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000001 XMM01=00007ffe7140d6100000003000000010 XMM02=65656565656565656565656565656565 XMM03=00000000000000000000000000000000 XMM04=ff00ff00000000000000000000000000 XMM05=ffffffffffffffffffffffffffff0000 XMM06=ff00ff00000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000